CVE-2025-71405
2026-08-14
12h16 +00:00
12h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| URL Redirection to Untrusted Site The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect. |
