PT-2020-13094 · Sourcegraph · Sourcegraph

Alvaro Munoz + 5 · Published 2020-04-30 · Updated 2021-12-20 · CVE-2020-12283

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcegraph versions prior to 3.15.1

Description The issue is related to a vulnerable authentication workflow due to improper validation in the SafeRedirectURL method. This method, located in cmd/frontend/auth/redirect.go, fails to properly validate URLs, which can be exploited. For example, the substring //foo//example.com can be used to bypass validation.

Recommendations For versions prior to 3.15.1, update to version 3.15.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the SafeRedirectURL method in cmd/frontend/auth/redirect.go to minimize the risk of exploitation.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-12283

GHSA-MX43-R985-5H4M

Affected Products

Sourcegraph

References · 12

• 🔥 https://securitylab.github.com/advisories/GHSL-2020-085-sourcegraph · Exploit
• ❌ https://github.com/sourcegraph/sourcegraph/commit/c0f48172e815c7f66471a38f0a06d1fc32a77a64 · Patch, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2020-12283 · Security Note
• https://osv.dev/vulnerability/GHSA-mx43-r985-5h4m · Vendor Advisory
• ❌ https://github.com/sourcegraph/sourcegraph/pull/10167 · Patch, Deleted
• https://osv.dev/vulnerability/CVE-2020-12283 · Vendor Advisory
• ❌ https://github.com/sourcegraph/sourcegraph/blob/master/CHANGELOG.md · Note, Deleted
• ❌ https://github.com/sourcegraph/sourcegraph/compare/v3.15.0...v3.15.1 · Note, Deleted
• ❌ https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-mx43-r985-5h4m · Note, Deleted
• ❌ https://github.com/sourcegraph/sourcegraph · Note, Deleted
• https://t.me/cvenotify/10214 · Telegram Post
• https://t.me/cvenotify/3438 · Telegram Post