Executive Summary

This vulnerability in React Router versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5 allows an attacker to craft a malicious path that, when used in navigation methods like navigate(), <Link>, or redirect(), causes the application to redirect to an external URL unexpectedly. It occurs only if untrusted input is passed into navigation paths in the application code. This can lead to unauthorized modification of navigation behavior. [1]

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by allowing an attacker to cause your React Router application to redirect users to external URLs without authorization. This can lead to integrity issues in your application's navigation flow, potentially exposing users to phishing or malicious sites. The attack requires low privileges and no user interaction, making it relatively easy to exploit if untrusted input is used in navigation paths. [1]

Useful 0 Not Useful 0

Detection Guidance

Detection involves identifying if your React Router application is using vulnerable versions (6.0.0 through 6.30.1 or 7.0.0 through 7.9.5) and if untrusted input is passed into navigation paths. You can check the installed react-router version with the command: npm list react-router. Additionally, review your application code for usage of navigate(), <Link>, or redirect() methods that accept user-controlled input. Network detection of exploit attempts may require monitoring for unexpected external URL redirects triggered by crafted paths, but no specific commands are provided. [1]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to upgrade react-router to a patched version: at least 6.30.2 if using version 6.x, or at least 7.9.6 if using version 7.x. Additionally, ensure that your application does not pass untrusted or user-controlled input directly into navigation paths used by navigate(), <Link>, or redirect() methods. [1]

Useful 0 Not Useful 0