Open Redirect Vulnerability in Invoice Ninja Client Portal

Executive Summary

Invoice Ninja versions up to 5.13.26 have an open redirect vulnerability in the client portal login. This means that an attacker can create a specially crafted login link containing a malicious external URL in the intended query parameter. When a victim uses this link and logs in, the application redirects them to the attacker-controlled external URL without validating the host. This happens because the intended parameter is stored in the session and then used directly in a redirect after login.

This vulnerability allows unauthenticated attackers to trick authenticated users into visiting malicious websites, enabling phishing attacks.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by enabling attackers to redirect your authenticated users to malicious external websites. This can lead to phishing attacks where users might be tricked into revealing sensitive information or downloading malware. It undermines user trust and can potentially lead to credential theft or other security breaches.

Useful 0 Not Useful 0