CyberRota Analysis
AI-GeneratedVersions of chi prior to 5.2.2 are vulnerable to an open redirect flaw in the RedirectSlashes middleware, which allows attackers to exploit the Host header for constructing redirect URLs. This vulnerability can lead to phishing attacks and potential credential theft, making it critical for developers and organizations using affected versions to prioritize patching. Users of chi should assess their exposure and implement necessary updates to mitigate risks associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.