Exploitation Summary
EIP tracks 2 public exploits for CVE-2024-57609. PoCs published by Mr-UN533N, str4ng3r-0x7.
AI-analyzed exploit summary This repository demonstrates an open redirect vulnerability in Kanaries by manipulating the `redirect_path` parameter during the login process. The PoC shows how an attacker can redirect users to arbitrary malicious sites by modifying the URL parameter.
Description
An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection function.
Exploits (2)
This repository demonstrates an open redirect vulnerability in Kanaries by manipulating the `redirect_path` parameter during the login process. The PoC shows how an attacker can redirect users to arbitrary malicious sites by modifying the URL parameter.
This repository documents an open redirect vulnerability in Kanaries, where the `redirect_path` parameter in the login flow can be manipulated to redirect users to arbitrary domains. The PoC demonstrates the issue but does not include exploit code.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L