PT-2024-40008 · Nginx · Nginx

Published 2024-05-23 · Updated 2024-05-23

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software name or version is mentioned, so the description is not applicable in this section.

Description A potential hostname injection issue has been discovered, which could allow attackers to alter URL resolution. If a request contains the X-Forwarded-Host HTTP header, a website would use its value instead of the actual HTTP hostname. In cases where caching is enabled, this could allow an attacker to embed a remote URL as the base URL for any site, causing other visitors to be redirected unknowingly. This issue is less likely to affect servers running behind a reverse proxy, such as nginx.

Recommendations For existing projects that do not run behind a reverse proxy, update the .htaccess file with the following configuration to remove the X-Forwarded-Host header from any request:

<IfModule mod headers.c>
  RequestHeader unset X-Forwarded-Host
</IfModule>

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

GHSA-25GQ-JVX2-VG9X

Affected Products

Nginx

References · 5

• https://osv.dev/vulnerability/GHSA-25gq-jvx2-vg9x · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2015-013-1.yaml · Note
• https://github.com/silverstripe/silverstripe-framework/commit/75137dbab28c0efd28b07e50044a50c5af4e46aa · Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://silverstripe.org/software/download/security-releases/ss-2015-013 · Note