SPIP Open Redirect Vulnerability via Login Form in AJAX Mode

A vulnerability allowing open redirect has been identified in SPIP versions prior to 4.4.5 and 4.3.9. This issue arises in the login form when it is used in AJAX mode, allowing attackers to craft malicious URLs that redirect users to arbitrary external sites after they log in. The vulnerability is present on sites that have modified the login page to operate in AJAX mode and is not addressed by SPIP's security measures.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users to external sites, potentially causing phishing or other malicious outcomes.