Open Redirect Vulnerability
An open redirect vulnerability was found in Release v0.2.36 of the software, allowing unauthenticated attackers to redirect users to arbitrary websites via a specially crafted URL. The issue has not yet been patched.
Available publicly on Dec 30 2024
Remediation Steps
- Validate and sanitize all user-controlled input used in URL redirections.
- Implement a whitelist of allowed URLs for redirection.
- Update the software to a version that includes these security measures.
- Educate users about the risks of clicking on untrusted links.
Patch Details
- Fixed Version: N/A
- Patch Commit: N/A
Want more out of Sightline?
Sightline offers even more for premium customers
Go Premium
We have - related security advisories that are available with Sightline Premium.