CVE-2026-58450— Invoice Ninja 输入验证错误漏洞

Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter

Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated attackers to redirect authenticated victims to attacker-controlled external URLs by injecting a malicious value into the intended query parameter. Attackers can craft a client login link with an external URL in the intended parameter, which is stored in the session without host validation and emitted verbatim via a bare redirect in the ContactLoginController authenticated() handler after the victim completes a legitimate login, enabling phishing attacks.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

指向未可信站点的URL重定向(开放重定向)

Invoice Ninja 输入验证错误漏洞

Invoice Ninja是Invoice Ninja公司开源的一个免费发票软件。 Invoice Ninja 5.13.26及之前版本存在输入验证错误漏洞，该漏洞源于客户端门户登录存在开放重定向漏洞，攻击者可通过向查询参数注入恶意值，使未经身份验证的攻击者将经过身份验证的用户重定向至攻击者控制的外部URL，可能导致钓鱼攻击。

N/A

N/A