Sanluan PublicCMS Open Redirect Vulnerability in PDF.js Viewer

An open redirect vulnerability has been identified in Sanluan PublicCMS versions through 5.202506.a. The issue arises in the PDF.js viewer file, where the 'file' parameter can be manipulated to redirect users to external sites without proper security checks. This vulnerability can be exploited remotely, particularly on iPhone, iPad, or iPod devices.

Impact

Exploitation of this vulnerability leads to an open redirect, allowing attackers to redirect users to malicious websites, potentially facilitating phishing attacks.

Reproduction

To reproduce this vulnerability, access the PDF.js viewer file and include a 'file' parameter in the URL query string. If the request is made from an iPhone, iPad, or iPod, the user will be redirected to the URL specified in the 'file' parameter.

Remediation

Users are advised to update to the patched version of Sanluan PublicCMS. The patch is available on the Sanluan PublicCMS GitHub repository.