CVE-2025-71405 : 상세 정보

CVE-2025-71405

2026-08-14
12h16 +00:00
A01-Broken Access Control
2026-10-08
16h16 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

참고 자료