Sylius has an Open Redirect via Referer Header

Sylius is an Open Source eCommerce Framework on Symfony. CurrencySwitchController::switchAction(), ImpersonateUserController::impersonateAction() and StorageBasedLocaleSwitcher::handle() use the HTTP Referer header directly when redirecting. The attack requires the victim to click a legitimate application link placed on an attacker-controlled page. The browser automatically sends the attacker's site as the Referer, and the application redirects back to it. This can be used for phishing or credential theft, as the redirect originates from a trusted domain. The severity varies by endpoint; public endpoints require no authentication and are trivially exploitable, while admin-only endpoints require an authenticated session but remain vulnerable if an admin follows a link from an external source such as email or chat. The issue is fixed in versions: 1.9.12, 1.10.16, 1.11.17, 1.12.23, 1.13.15, 1.14.18, 2.0.16, 2.1.12, 2.2.3 and above.

N/A

指向未可信站点的URL重定向(开放重定向)

Sylius 输入验证错误漏洞

Sylius是波兰Sylius公司的一套基于Symfony框架的开源电子商务平台。 Sylius存在输入验证错误漏洞，该漏洞源于多个控制器直接使用HTTP Referer标头进行重定向，可能导致钓鱼或凭据窃取。以下版本受到影响：1.9.12之前版本、1.10.16之前版本、1.11.17之前版本、1.12.23之前版本、1.13.15之前版本、1.14.18之前版本、2.0.16之前版本、2.1.12之前版本和2.2.3之前版本。

N/A

N/A