Threats tagged 'ghsa-f3g8-9xv5-77gv'

Saltcorn versions prior to 1.4.6, between 1.5.0-beta.0 and 1.5.6, and between 1.6.0-alpha.0 and 1.6.0-beta.5 contain an open redirect vulnerability in the POST /auth/login endpoint. The vulnerability arises from incomplete validation of the 'dest' parameter, allowing backslash characters to bypass checks and cause redirection to attacker-controlled domains after login. This can be exploited by tricking users into logging in via a crafted URL, potentially enabling phishing attacks.