VULNERABILITY INTELLIGENCE
CVE-2025-71405
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-08-14
Last modified2026-10-08
Description
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft.
Weakness classification
- disclosure@vulncheck.com: CWE-601