CVE-2024-53995

GHSL-2024-288: SickChill open redirect in login

CVSS 1.9 LOWEPSS 0.9%CWE-601

Vexday Risk Score

23Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 1.9EPSS 0.9%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

08 Jan 2025Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

SickChill is an automatic video library manager for TV shows. A user-controlled `login` endpoint's `next_` parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open redirect. Commit c7128a8946c3701df95c285810eb75b2de18bf82 changes the login page to redirect to `settings.DEFAULT_PAGE` instead of to the `next` parameter.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:P

Affected products

SickChill · sickchill

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/SickChill/sickchill/blob/846adafdfab579281353ea08a27bbb813f9a9872/sickchill/views/authentication.py#L33 https://github.com/SickChill/sickchill/commit/c7128a8946c3701df95c285810eb75b2de18bf82 https://github.com/SickChill/sickchill/pull/8811 https://securitylab.github.com/advisories/GHSL-2024-283_GHSL-2024-291_sickchill_sickchill/