CVE-2022-0637Medium· 6.1▾ Sunlitopen redirect in pollbot
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.4%
0.4% → 0.4%
(From https://bugzilla.mozilla.org/show_bug.cgi?id=1753838)
Summary: There was an open redirection vulnerability in the path of:
https://pollbot.services.mozilla.com/ and https://pollbot.stage.mozaws.net/
Description: An attacker can redirect anyone to malicious sites.
Steps To Reproduce: Type in this URL:
https://pollbot.services.mozilla.com/%0a/evil.com/
It redirects to that website
evil.com
evil.com was used as an example but this could be any website. Note, the /%0a/ and trailing / are required.
Supporting Material/References: https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html
Impact
Attackers can serve malicious websites that steal passwords or download ransomware to their victims machine due to a redirect and there are a heap of other attack vectors.
pollbot < 1.4.6Upgrade to a patched release:
pollbot 1.4.6