CVE-2024-21641: Flarum's logout Route allows open redirects
Summary
CVE-2024-21641: Flarum's logout Route allows open redirects. Affects flarum/core versions < 1.8.5. Fixed in 1.8.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Flarum is an open-source forum software built with PHP. It provides a platform for online communities to engage in discussions and share information. The logout route in Flarum allows users to log out of their accounts. However, a vulnerability in this route allows for open redirects, where a third party can redirect users from a trusted domain of the Flarum installation to any link. This can be exploited by spammers to redirect users to malicious websites using a trusted domain.
Vulnerability Detail
The vulnerability lies in the /logout route of Flarum, which includes a redirect parameter. This parameter can be manipulated by a third party to redirect users to any link. While logged-in users are required to confirm the logout, guests are immediately redirected. This vulnerability can be used to deceive users and redirect them to malicious websites. Some ecosystem extensions modifying the logout route have already been affected by this vulnerability.
How To Fix
Minimum fixed version
1.8.5
This is the first release that contains the fix.
composer require flarum/core:1.8.5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
While updating to version 1.8.5 is the recommended solution, some extensions modifying the logout route may have implemented safe measures to address this vulnerability. However, it is still advisable to update to version 1.8.5 to ensure complete security.
Conclusion
The vulnerability in Flarum's logout route allows for open redirects, which can be exploited by spammers to redirect users to malicious websites. To fix this vulnerability, community administrators should update their Flarum installation to version 1.8.5. It is also recommended to check the version of Flarum using the provided command. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for flarum/core →
FAQ
The vulnerability allows spammers to redirect users from a trusted domain of a running Flarum installation to any link. This can be used to deceive users and redirect them to malicious websites.
Yes, all Flarum installations prior to version 1.8.5 are affected by this vulnerability.
You can check the version of Flarum you are running by running the command composer show flarum/core.
Logged-in users are required to confirm the logout, so they are less likely to be affected by this vulnerability. However, guests are immediately redirected, making them more vulnerable.
Some extensions modifying the logout route may have implemented safe measures to address this vulnerability. However, it is still recommended to update to version 1.8.5 for complete security.
References
Related vulnerabilities
Recent vulnerabilities recorded for flarum/core.
