CVE-2022-0645 - Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog

Back Back to CVE browser

MEDIUM

Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog

Published Apr 19, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.80%

Description

Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.

Affected products

Vendor Posthog Product Posthog/posthog Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <1.34.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Posthog

Posthog/posthog

n/a

Version	Status	Constraints
unspecified	affected	<1.34.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

https://github.com/posthog/posthog/commit/859d8ed9ac7c5026db09714a26c85c1458abb038
x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/c13258a2-30e3-4261-9a3b-2f39c49a8bd6
x_refsource_CONFIRMExploitThird Party Advisory

Link	Providers	Tags
https://github.com/posthog/posthog/commit/859d8ed9ac7c5026db09714a26c85c1458abb038		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/c13258a2-30e3-4261-9a3b-2f39c49a8bd6		x_refsource_CONFIRMExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published Apr 19, 2022

Updated Aug 2, 2024

Reserved Feb 16, 2022

Link CVE-2022-0645

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-0645

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-0645