PT-2024-40091 · Khoj · Khoj

Published 2024-07-08 · Updated 2024-07-08

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions: Khoj (affected versions not specified)

Description: The issue allows an attacker to redirect a victim to a malicious page by utilizing the next parameter on the login page, making it appear as a legitimate app.khoj.dev URL. For instance, the URL https://app.khoj.dev/login?next=//example.com will redirect to https://example.com. The problem seems to be related to a method in the auth.py file. This could potentially be used in phishing attempts, although the impact is considered low.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

GHSA-564J-V29W-RQR6

Affected Products

Khoj

References · 5

• https://osv.dev/vulnerability/GHSA-564j-v29w-rqr6 · Vendor Advisory
• https://github.com/khoj-ai/khoj · Note
• https://github.com/khoj-ai/khoj/commit/4daf16e5f916641304e11d56a6071ad365c21a18 · Note
• https://github.com/khoj-ai/khoj/security/advisories/GHSA-564j-v29w-rqr6 · Note
• https://github.com/khoj-ai/khoj/blob/2667ef45449eb408ce1d7c393be04845be31e15f/src/khoj/routers/auth.py#L95 · Note