Bunker Web 1.6.2 Uncontrolled Redirect Vulnerability (CVE-2023-4844)

Critical Vulnerability Information Vulnerability Overview Name: Bunker Web 1.6.2 - Uncontrolled external site redirect CVE ID: CVE-2023-4844 Status: Public Release Date: Aug 15, 2023 Affected Product: Bunker Web Vendor: Bunkery Affected Version: 1.6.2 Vulnerability Type: T156, Uncontrolled redirection to external sites Remote Exploitable: Yes CVSS v4.0 Base Score: 4.8 Exploit Available: Yes Description A specific flaw has been identified in BunkerWeb application version 1.6.2, specifically affecting the login redirection mechanism. This vulnerability allows attackers to redirect authenticated users to any arbitrary web server or domain. Vulnerability Details Vulnerable Endpoint: Bypassing Protection Mechanism: Attackers can craft a parameter to trigger redirection. Example Payload: This payload will be converted to: Exploitation Scenario Logged-in users may be unintentionally redirected to the page. Attackers can create a link such as , and when the victim clicks it, redirection is triggered. This method also applies to users who are already logged in but have not yet triggered the protection mechanism. PoC For authenticated users: For unauthenticated users (redirected after login): Mitigation No patch is currently available to address this vulnerability. References GitHub Repository: https://github.com/bunkertw/bunkerweb Security: https://github.com/bunkertw/bunkerweb/security Discoverer This vulnerability was discovered by Johan Gimeno (from Fluid Attacks Offensive Team).

Goal Reached Thanks to every supporter — we hit 100%!

Bunker Web 1.6.2 Uncontrolled Redirect Vulnerability (CVE-2023-4844)