MEDIUM 5.3 NVD
CVE-2024-58398
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query p
Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, when clicked by a logged-in user, redirects the victim to an attacker-controlled website for phishing.
References
- https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6
- https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c
- https://www.vulncheck.com/advisories/coder-2.3.1-before-2.16.1-open-redirect-via-login-pag
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-10-17 via NVD.
vulnfeed aggregates 16186 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.