CVE-2025-71405
2026-08-14
12h16 +00:00
12h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| URL Redirection to Untrusted Site The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect. |
