PT-2022-13487 · Unknown+1 · Django-Spirit+1

Published 2022-03-06 · Updated 2022-03-11 · CVE-2022-0869

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions spirit versions prior to 0.12.3 django-spirit versions prior to 0.12.3

Description The issue is related to multiple open redirects in the GitHub repository. Specifically, the /user/login endpoint does not check the value of the next parameter when the user is logged in, passing it directly to redirect, resulting in an open redirect. This also affects the /user/logout, /user/register, and /user/resend-activation endpoints.

Recommendations For spirit versions prior to 0.12.3, update to version 0.12.3 or later. For django-spirit versions prior to 0.12.3, update to version 0.12.3 or later. As a temporary workaround, consider restricting access to the vulnerable endpoints, such as /user/login, /user/logout, /user/register, and /user/resend-activation, until a patch is available. Avoid using the next parameter in the affected API endpoints until the issue is resolved.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-0869

GHSA-5P9J-W2WX-QX4C

Affected Products

Django-Spirit

Spirit

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0869.json · Exploit
• 🔥 https://huntr.dev/bounties/ed335a88-f68c-4e4d-ac85-f29a51b03342 · Exploit
• https://github.com/nitely/spirit/commit/8f32f89654d6c30d56e0dd167059d32146fb32ef · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0869 · Security Note
• https://osv.dev/vulnerability/GHSA-5p9j-w2wx-qx4c · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0869 · Vendor Advisory
• https://github.com/nitely/spirit · Note
• https://t.me/cvenotify/27804 · Telegram Post
• https://t.me/cvenotify/27810 · Telegram Post