CVE-2026-88880: renovatebot renovate, пренасочване към чужд адрес

Описание

Оригинално описание

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructure to exfiltrate authentication credentials.

Засегнати продукти

• renovatebot renovate: преди 44.11.3; 44.11.3
• mend renovate-ce: преди 15.4.0; 15.4.0
• mend renovate-ee-server: преди 15.4.0; 15.4.0
• mend renovate-ee-worker: преди 15.4.0; 15.4.0
• mend mend-renovate-ce: преди 15.4.0; 15.4.0
• mend mend-renovate-enterprise-edition: преди 10.4.0; 10.4.0

Вид слабост

• CWE-601 URL Redirection to Untrusted Site

История

Други уязвимости в renovatebot renovate

• 8.5CVE-2026-110868
• 9.0CVE-2026-110867
• 5.3CVE-2026-110866
• 7.1CVE-2026-110865
• 8.5CVE-2026-88889

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-88880
• https://nvd.nist.gov/vuln/detail/CVE-2026-88880
• https://github.com/renovatebot/renovate/security/advisories/GHSA-9hmg-9h89-jhmx
• https://www.vulncheck.com/advisories/renovate-before-44.11.3-credential-exfiltration-via-link-header