CyberRota Analysis
AI-GeneratedThe vulnerability exists in the trainer_login view of wger versions prior to 2.6, allowing an attacker to exploit an open redirect by manipulating the 'next' GET parameter without proper validation. This could lead to phishing attacks and exposure of sensitive information, such as the wger URL structure and impersonated user details, through the Referer header. Organizations using affected versions should prioritize patching this vulnerability to protect against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_login view (wger/core/views/user.py). After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect() without validating it with url_has_allowed_host_and_scheme(). An attacker who delivers a crafted link to an authenticated trainer can redirect the trainer's browser to an attacker-controlled domain, enabling phishing and leaking the wger URL structure (including the impersonated user's user_pk) via the Referer header.