CyberRota Analysis
AI-GeneratedThe redirectBack() utility in h3 versions prior to 2.0.1-rc.18 is vulnerable to an open redirect flaw, allowing attackers to exploit unsanitized protocol-relative paths in the Referer header. This can lead to unauthorized redirection to external domains, potentially facilitating phishing attacks or other malicious activities. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails to sanitize protocol-relative paths in the Referer header pathname. Attackers can craft a same-origin URL with a double-slash path segment that passes origin validation but produces a Location header interpreted by browsers as a protocol-relative redirect to an external domain.