Retool Host Header Injection Vulnerability

A host header injection vulnerability exists in self-hosted Retool deployments prior to version 3.196.0, when the BASE_DOMAIN environment variable is not set. In these cases, the HTTP host header can be manipulated, potentially leading to unauthorized actions or access.

Impact

Exploitation of this vulnerability could allow for host header injection, which can be used to manipulate the application's behavior or bypass certain security controls.

Remediation

Users can set the BASE_DOMAIN environment variable to the full URL of their Retool deployment to address this vulnerability. For versions 3.196.0 and later, this environment variable is required at startup.