kanwangzjm Funiture Open Redirect Vulnerability in Login Component

An open redirect vulnerability has been identified in kanwangzjm Funiture versions prior to 71ca0fb0658b3d839d9e049ac36429207f05329b. The issue arises in the Login component, specifically within the doPost function of LoginServlet.java. The vulnerability allows for manipulation of the 'ret' parameter, leading to unauthorized redirection. This flaw can be exploited remotely and has been publicly disclosed, with an available proof-of-concept exploit.

Impact

Exploitation of this vulnerability allows for open redirect, which can be used to conduct phishing attacks by redirecting users to malicious sites.

Reproduction

To reproduce this vulnerability, send a POST request to the '/login.do' or '/user/login.page' endpoints with a manipulated 'ret' parameter that points to an external site. The application will redirect the user to the specified URL, bypassing any validation.