CVE-2022-3438 Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

This is a known issue and has been fixed with the v2.5.0a5 release. We recommend using the latest version of Redirect. If you need an older version, please let us know and we’ll try to accommodate. If you need to upgrade, please check out the upgrade guide on GitHub.

Redirect v2.5.0a5 and later is compatible with GitHub’s new HTML sanitization rules as well as the new GitHub UI. However, GitHub’s UI will not display any of the custom CSS that Redirect adds to its UI.

How to use the Redirect HTML sanitizer

The Redirect HTML sanitizer detects and removes the following tags:

Upgrade Guide

To upgrade to the latest version, check out the upgrade guide on GitHub.

**RESPONSE**
This is a known issue and has been fixed with the v2.5.0a5 release. We recommend using the latest version of Redirect. If you need an older version, please let us know and we’ll try to accommodate. If you need to upgrade, please check out the upgrade guide on GitHub.

Redirect v2.4.0 and earlier

This is a known issue and has been fixed with the v2.5.0a5 release. We recommend using the latest version of Redirect. If you need an older version, please let us know and we’ll try to accommodate. If you need to upgrade, please check out the upgrade guide on GitHub.

Redirect v2.4.0 and earlier is not compatible with GitHub’s new HTML sanitization rules as well as the new GitHub UI.

What is Redirect?

Redirect is an open source, self-hosted solution for redirecting HTTP traffic to HTTPS. It provides the ability to create 301 redirects and serves as an ideal tool for SEO (Search Engine Optimization) professionals.
Redirect can be used in many ways. It can be used as a quick way of creating a “pre-configured” SSL certificate that is easy to install on servers or websites. One of the most popular uses for Redirect is as part of an SEO strategy. When implemented into your web development process, Redirect enables you to quickly and easily implement HTTPS without having to worry about installing it or configuring it yourself. As Redirect contains settings tailored specifically for SEO professionals, it enables you to optimize your website according to Google’s updated search algorithm changes without having much technical skill, which leads to better conversion rates.

Timeline

Published on: 10/10/2022 12:15:00 UTC
Last modified on: 10/11/2022 18:54:00 UTC

References