CyberRota Analysis
AI-GeneratedThe SecureDrop Client prior to version 1.3.1 is vulnerable to cross-origin redirect attacks, allowing a malicious SecureDrop Server to bypass the securedrop-proxy's origin limitations. This could potentially lead to unauthorized access or data leakage during communications between journalists and their sources. Newsrooms utilizing SecureDrop should prioritize upgrading to version 1.3.1 to mitigate this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. Prior to version 1.3.1, a malicious SecureDrop Server could bypass securedrop-proxy's origin limitation by responding with cross-origin redirects. SecureDrop Server itself has multiple layers of built-in hardening, and is a dedicated physical machine exposed on the internet only via Tor hidden services for the Source and Journalist interfaces, and optionally via remote SSH access over another Tor hidden service. A newsroom's SecureDrop Workstation communicates only with its own dedicated SecureDrop Server. Version 1.3.1 fixes the issue.