DiracX-Web is vulnerable to attack through an Open Redirect on its login page
Summary
An attacker can forge a request to redirect an authenticated user to any arbitrary website.
Details
On the login page, we have a redirect field which is the location where the server will redirect the user. This URI is not verified, and can be an arbitrary URI.
Paired with a parameter pollution, we can hide our malicious URI (ex: https://dns.com/?param1=im_hidden_if_theres_lot_of_args?param1=bbb).
PoC
This POC can leak user's position.
Impact
This could be used for phishing and extracting new data (such as redirecting to a new "log in" page, and asking users to reenter credentials).
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| npm package | @dirac-grid/diracx-web-components | < 0.1.0-a8 | 0.1.0-a8 |
References
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N- Weakness (CWE)
CWE-601- Platform
- npm
- Package
@dirac-grid/diracx-web-components- Disclosed
- 17.07.2025
- Updated
- 11.10.2026 10:22
Sources and licenses
OSV / GitHub Advisory Database - GHSA-hfj7-542q-8fvv - CC BY 4.0
Vulnerability history: @dirac-grid/diracx-web-components
All published vulnerabilities of this package (npm package), newest first. Shows whether this is a one-off slip or a package that needs watching.
This is the only known vulnerability of this package.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.