Vulnerability Description
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.
Related Weaknesses (CWE)
References
- https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93
- https://www.vulncheck.com/advisories/go-chi-chi-before-open-redirect-via-redirec
- https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93
FAQ
What is CVE-2025-71405?
CVE-2025-71405 is a documented vulnerability. chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host hea...
How severe is CVE-2025-71405?
CVSS scoring is not yet available for CVE-2025-71405. Check NVD for updates.
Is there a patch for CVE-2025-71405?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.