CVE-2023-34247

Summary

CVE-2023-34247 is a vulnerability affecting the `@keystone-6/auth` package, used in Keystone, a Node.JS content management system. Versions 7.0.0 and older of this package contain an open redirect vulnerability. The `/` filter in the redirectfunction can be bypassed, allowing users to be redirected to domains other than the intended one. This issue poses a security risk, as attackers could potentially redirect users to malicious sites. Users can mitigate this vulnerability by implementing a patch from pull request 8626 or by avoiding the use of the `@keystone-6/auth` package.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.