Skip to main content

URL Redirection to Untrusted Site ('Open Redirect')

CVE-2025-69725

Medium
4.7/10

Summary

The "RedirectSlashes()" function of "middleware/strip.go" in go-chi/chi performs incomplete path sanitization 5.2.2 through version 5.2.3, failing to remove backslashes (\). This allows crafted requests to bypass validation and trigger open redirects, potentially sending users to attacker-controlled domains. The issue stems from overly permissive normalization logic intended to simplify URL cleanup.

  • LOW
  • NETWORK
  • NONE
  • CHANGED
  • REQUIRED
  • NONE
  • LOW
  • NONE

CWE-601 - Open Redirect

An open redirect attack employs a URL parameter, HTML refresh tags, or a DOM based location change to exploit the trust of a vulnerable domain to direct the users to a malicious website. The attack could lead to higher severity vulnerabilities such as unauthorized access control, account takeover, XSS, and more.

References

Advisory Timeline

  • Published