IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-01-08 21:15

MODIFIED

2025-01-08 21:15

EPSS (Prob. Exploit)

1.01%

Top 36.6%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08

> DESCRIPTION

SickChill is an automatic video library manager for TV shows. A user-controlled `login` endpoint's `next_` parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open redirect. Commit c7128a8946c3701df95c285810eb75b2de18bf82 changes the login page to redirect to `settings.DEFAULT_PAGE` instead of to the `next` parameter.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-6gf2-ffq8-gcww LOW

GHSL-2024-288: SickChill open redirect in login

AFFECTED PACKAGES:

PIP / sickchill

<= 2024.3.1

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

GHSL-2024-288: SickChill open redirect in login

AFFECTED PACKAGES:

Unknown / Unknown

39 versions affected

ALIASES:

GHSA-6gf2-ffq8-gcww, PYSEC-2026-1920

> HISTORIQUE DES MODIFICATIONS

Première apparition

08/01/2025 21:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 14:58

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui