CVE-2023-34247

mediumpriority · track · 16EPSS 0.004 · 35 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.41% (35th) EPSS

CVSS 4.1 · medium

Is it mine?

3 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · scored 2026-10-27

Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. To mitigate this issue, one may apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.

cvss

Technical severity, 0–10. One row per scoring source.

6.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.8–6.1

v3.14.1mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:Nprimary · NVD / NIST USexploitability 2.3 · impact 1.4

v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · ENISA EU

v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · security-advisories@github.comexploitability 1.7 · impact 4

v3.16.1mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · OSV

v3.13.8lowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-601USCWE-601US

affected products (3)

Products and version ranges known to be affected.

keystonejs Keystone≤ ≤ 7.0.0enisa_euvdEU
keystonejs keystone≤ 7.0.0nvdUScpe:2.3:a:keystonejs:keystone:*:*:*:*:*:*:*:*
npm @keystone-6/auth< 7.0.0osvUSpkg:npm/%40keystone-6/auth

advisories (1)

Vendor and ecosystem advisories describing this.

GHSA-jqxr-vjvv-899m@keystone-6/auth Open Redirect vulnerability2023-06-14ghsa · osvUS
### Summary There is an open redirect in the `@keystone-6/auth` package, where the redirect leading `/` filter can be bypassed. ### Impact Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. ### Mitigations - Don't use the `@keystone-6/auth` package ### References - [CWE-601: URL Redirection to Untrusted Site ('Open Redirect')](https://cwe.mitre.org/data/definitions/601.html) - [OWASP: Unvalidated Redirects and Forwards Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html) #### Similar Vulnerability Reports - [CVE-2023-0748](https://nvd.nist.gov/vuln/detail/CVE-2023-0748) - [CVE-2022-2252](https://nvd.nist.gov/vuln/detail/CVE-2022-2252) #### Credits Thanks to [morioka12](https://github.com/scgajge12) for reporting this problem. If you have any questions around this security advisory, please don't hesitate to contact us at [security@keystonejs.com](mailto:security@keystonejs.com), or [open an issue on GitHub](https://github.com/keystonejs/keystone/issues/new/choose). If you have a security flaw to report for any software in this repository, please see our [SECURITY policy](https://github.com/keystonejs/keystone/blob/main/SECURITY.md).

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd osv NVD CVE.org MITRE

published 2023-06-13modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan