🔙 목록으로 돌아가기

CVE-2019-3912: LabKey Server Community Edition <18.3.0 - Open Redirect

TitleLabKey Server Community Edition <18.3.0 - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the theft of sensitive information.
RemediationUpgrade LabKey Server Community Edition to version 18.3.0 or later to mitigate the vulnerability.
CVSS Score6.1
EPSS Score0.08738
CVE IDCVE-2019-3912
CWE IDCWE-601
Shodan QueryServer: Labkeyhttp.title:"sign in: /home"server: labkey
Fofa Querytitle="sign in: /home"
Tags cve2019 cve tenable redirect labkey vuln

🔍 Vulnerability Description

LabKey Server Community Edition before 18.3.0-61806.763 contains an open redirect vulnerability via the /__r1/ returnURL parameter, which allows an attacker to redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /labkey/__r1/login-login.view?returnUrl=http://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3912.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-3912.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A