@keystone-6/auth Open Redirect vulnerability

中 4.1CVE-2023-34247 · GHSA-jqxr-vjvv-899m · 13/06/2023 公開 · 17/06/2026 更新

要点

CVE-2023-34247 は keystone (keystonejs), @keystone-6/auth に影響する深刻度「中」 (CVSS 4.1) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.41%（全脆弱性の 35.0% より高い）。
対処：7.0.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
keystone keystonejs	`≤ 7.0.0`	修正版なし
@keystone-6/auth npm	`< 7.0.0`	`7.0.0`

概要

Summary

There is an open redirect in the @keystone-6/auth package, where the redirect leading / filter can be bypassed.

Impact

Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location.

Mitigations

Don't use the @keystone-6/auth package

References

Similar Vulnerability Reports

Credits

Thanks to morioka12 for reporting this problem.

If you have any questions around this security advisory, please don't hesitate to contact us at [email protected], or open an issue on GitHub.

If you have a security flaw to report for any software in this repository, please see our SECURITY policy.

NVD の説明

Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. To mitigate this issue, one may apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.