CVE-2024-58398: Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, when clicked by a logged-in user, redirects the victim to an attacker-controlled website for phishing.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Affected versions are Coder 2.3.1 through versions before 2.14.4, Coder 2.15.x before 2.15.3, and Coder 2.16.0 before 2.16.1.
What does an attacker need to exploit this issue?
An attacker needs to craft a Coder login URL containing a malicious redirect query parameter and persuade a logged-in user to click it. No attacker authentication is indicated.
What is the practical impact?
The user can be redirected from the Coder login page to an attacker-controlled website. This can support phishing, although the provided information indicates integrity impact only and no direct confidentiality or availability impact.
What versions address the vulnerability?
Upgrade to Coder 2.14.4, 2.15.3, or 2.16.1 or later, as applicable to the release branch in use.