VULNERABILITY INTELLIGENCE

CVE-2025-63784

CVSS score6.5 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2025-11-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing a redirect URL. A remote attacker can send a manipulated X-Forwarded-Host header to redirect an authenticated user to an arbitrary external website under their control, which can be exploited for phishing attacks.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-601

Primary references