PT-2021-15481 · Unknown · Trailing-Slash

Apple502J · Published 2021-05-24 · Updated 2021-06-08 · CVE-2021-23387

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions trailing-slash versions prior to 2.0.1

Description The issue allows for Open Redirect attacks through the use of trailing double slashes in URLs when accessing vulnerable endpoints, such as "https://example.com//attacker.example/". The problem stems from the use of relative URLs instead of absolute URLs in the web server. The vulnerable code is located in index.js::createTrailing().

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider modifying the index.js::createTrailing() function to use absolute URLs instead of relative URLs. Restrict access to the vulnerable endpoint to minimize the risk of exploitation. Avoid using trailing double slashes in URLs until the issue is resolved.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-23387

GHSA-RFHR-62XP-2FP2

SNYK-JS-TRAILINGSLASH-1085707

Affected Products

Trailing-Slash

References · 8

• 🔥 https://snyk.io/vuln/SNYK-JS-TRAILINGSLASH-1085707 · Exploit
• https://github.com/fardog/trailing-slash/commit/f8e66f1429308247e5a119d430203077d8f05048 · Patch
• https://osv.dev/vulnerability/CVE-2021-23387 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rfhr-62xp-2fp2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23387 · Security Note
• https://github.com/fardog/trailing-slash/blob/f640ece055fe85275c983de5eb94661b95e35670/index.js%23L36 · Note
• https://t.me/cvenotify/15208 · Telegram Post
• https://t.me/cvenotify/14956 · Telegram Post