Diracx Web
Approved changes feed: RSS · Atom
cpe:2.3:a:diracgrid:diracx-web:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Diracgrid (89789aba-bbed-55d4-9b6e-3ec2d36f68cc) |
|---|---|
| Product | Diracx Web (56085931-84db-5bc3-8af7-8d59b213ee40) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54066 |
vulnerable | 2026-06-08 07:33:11.099013 |
DiracX-Web login page has Open Redirect vulnerability
MEDIUM (4.7)
DiracX-Web is a web application that provides an interface to interact with the DiracX services. Prior to version 0.1.0-a8, an attacker can forge a request that they can pass to redirect an authenticated user to another arbitrary website. In the login page, DiracX-Web has a `redirect` field which is the location where the server will redirect the user. This URI is not verified, and can be an arbitrary URI. Paired with a parameter pollution, an attacker can hide their malicious URI. This could be used for phishing, and extract new data (such as redirecting to a new "log in" page, and asking another time credentials). Version 0.1.0-a8 fixes this vulnerability.
Published: 2025-07-17T14:44:27.982Z
Updated: 2025-07-17T20:03:49.445Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.