Open Redirect in ClawHost up to 0.0.45

Executive Summary

This vulnerability is an open redirect issue in antoinersx clawhost up to version 0.0.45. It exists in the handleRequest function of the reverseProxy.ts file within the Reverse Proxy component. By manipulating the token argument, an attacker can redirect users to malicious sites. The exploit is publicly available and the vendor did not respond to disclosure attempts.

Useful 0 Not Useful 0

Detection Guidance

Check for open redirect vulnerabilities in reverse proxy configurations. Inspect network traffic for unusual token manipulations or redirects to external domains. Review logs for requests to apps/clawhostgo/src/main/services/reverseProxy.ts with manipulated token arguments.

Useful 0 Not Useful 0

Impact Analysis

If you use antoinersx clawhost up to 0.0.45, attackers could trick you into visiting harmful websites by manipulating the token parameter. This could lead to phishing attacks, malware downloads, or unauthorized access to sensitive data.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows open redirect attacks via manipulation of the token argument in the reverse proxy function. This could potentially expose sensitive data or redirect users to malicious sites, which may violate data protection principles under GDPR (e.g., integrity and confidentiality) and HIPAA (e.g., safeguarding protected health information).

Useful 0 Not Useful 0

Mitigation Strategies

Update clawhost to the latest version beyond 0.0.45. Disable or restrict access to the reverse proxy component if not essential. Implement input validation for token arguments to prevent open redirect attacks.

Useful 0 Not Useful 0