CVE-2025-71405

chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.

CVSS

No CVSS.

References

Link	Resource
https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93
https://www.vulncheck.com/advisories/go-chi-chi-before-open-redirect-via-redirectslashes
https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93

Configurations

No configuration.

History

29 Sep 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de chi anteriores a la v5.2.2 contienen una vulnerabilidad de redirección abierta en la función de middleware RedirectSlashes que utiliza el encabezado Host para construir URLs de redirección. Los atacantes pueden manipular el encabezado Host para redirigir a los usuarios a hosts arbitrarios, lo que permite ataques de phishing y robo de credenciales.

Information

Published : 2026-08-14 12:16

Updated : 2026-10-08 16:16

NVD link : CVE-2025-71405

Mitre link : CVE-2025-71405

CVE.ORG link : CVE-2025-71405

JSON object : View

Products Affected

No product.

CWE

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

{"id": "CVE-2025-71405", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-71405", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-14T18:57:32.118107Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "go-chi", "product": "chi", "versions": [{"status": "affected", "version": "0", "lessThan": "5.2.2", "versionType": "semver"}, {"status": "unaffected", "version": "5.2.2", "versionType": "semver"}], "packageURL": "pkg:golang/github.com/go-chi/chi/v5", "defaultStatus": "unaffected"}]}], "published": "2026-08-14T12:16:43.297", "references": [{"url": "https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/go-chi-chi-before-open-redirect-via-redirectslashes", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-601"}]}], "descriptions": [{"lang": "en", "value": "chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft."}, {"lang": "es", "value": "Las versiones de chi anteriores a la v5.2.2 contienen una vulnerabilidad de redirecci\u00f3n abierta en la funci\u00f3n de middleware RedirectSlashes que utiliza el encabezado Host para construir URLs de redirecci\u00f3n. Los atacantes pueden manipular el encabezado Host para redirigir a los usuarios a hosts arbitrarios, lo que permite ataques de phishing y robo de credenciales."}], "lastModified": "2026-10-08T16:16:53.587", "sourceIdentifier": "disclosure@vulncheck.com"}