Threats tagged 'ghsa-gcwf-c25f-p9rv'

Kiwi TCMS version 16.1 contains an incomplete fix for an open redirect vulnerability in the account confirmation endpoint. The vulnerability allows an attacker to craft a confirmation link that redirects users to an external, attacker-controlled domain using protocol-relative URLs (e.g., //evil.com). This can facilitate phishing, malware delivery, or social engineering attacks by exploiting user trust in the legitimate Kiwi TCMS instance. The issue is fixed in version 16.2 by properly validating redirect URLs using Django's url_has_allowed_host_and_scheme utility.