Executive Summary

This vulnerability is an open redirect issue in CloudPanel Community Edition up to version 2.5.1. It occurs due to manipulation of the Referer argument in the /admin/users file of the HTTP Header Handler component. An attacker can exploit this remotely to redirect users to malicious sites.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can be exploited remotely to perform open redirect attacks, potentially leading users to malicious websites. This can result in phishing attacks, loss of user trust, and indirect compromise of user security.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade CloudPanel Community Edition to version 2.5.2 or later, as this version fixes the open redirect vulnerability. Upgrading the affected component is recommended to mitigate the issue.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by sending crafted HTTP GET requests to the /admin/users endpoint with a manipulated Referer header containing an external URL. If the server responds with a 302 redirect to the URL specified in the Referer header, the system is vulnerable. For example, you can use curl to test this: curl -I -H "Referer: http://malicious.example.com" https://your-cloudpanel-domain/admin/users and check if the response includes a 302 redirect to the malicious URL. [3]

Useful 0 Not Useful 0