Advisory Database
  • Advisories
  • Dependency Scanning
  1. pypi
  2. ›
  3. cg
  4. ›
  5. GHSA-w228-rfpx-fhm4

GHSA-w228-rfpx-fhm4: cg vulnerable to an Open Redirect Vulnerability on Referer Header

April 23, 2024

A vulnerability has been discovered in the handling of the referrer header in the application, which could allow an attacker to conduct open redirects. The issue arises from improper validation of the referrer header in certain conditions. By manipulating the referrer header, an attacker could potentially redirect users to malicious websites, phishing pages, or other dangerous destinations.

References

  • github.com/Clinical-Genomics/cg
  • github.com/Clinical-Genomics/cg/blob/master/cg/server/invoices/views.py
  • github.com/Clinical-Genomics/cg/commit/96e6a968a5a3639cc40ad251ad65952e4f38dd25
  • github.com/Clinical-Genomics/cg/security/advisories/GHSA-w228-rfpx-fhm4
  • github.com/advisories/GHSA-w228-rfpx-fhm4

Code Behaviors & Features

Detect and mitigate GHSA-w228-rfpx-fhm4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 60.2.12

Fixed versions

  • 60.2.12

Solution

Upgrade to version 60.2.12 or above.

Impact 6.1 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Learn more about CVSS

Weakness

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Source file

pypi/cg/GHSA-w228-rfpx-fhm4.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:14:58 +0000.