CVE-2023-31134 json
Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
published 2023-05-03 3 y ago modified 2026-09-10 1 mo ago also GHSA-4wm2-cwcf-wwvp , EUVD-2023-1470
- cvss
- 4.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 44%
- public exploits
- 0
- none known
Summary
Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an external website. This is either possible by an application implementing a feature for users to visit arbitrary websites or due to a bug allowing the open redirect. This allows the external website access to the IPC layer and therefore to all configured and exposed Tauri API endpoints and application specific implemented Tauri commands. This issue has been patched in versions 1.0.9, 1.1.4, and 1.2.5. As a workaround, prevent arbitrary input in redirect features and/or only allow trusted websites access to the IPC.
Patch / fix
- crates.io tauri 1.0.9, 1.1.4, 1.2.5
- tauri tauri 1.0.9, 1.1.4, 1.2.5
- github.com/tauri-apps/tauri@58ea0b4 commit
- github.com/tauri-apps/tauri@fa90214 commit
- github.com/tauri-apps/tauri@9c0593c commit
- github.com/tauri-apps/tauri/releases/tag/tauri-v1.0.9 release
- github.com/tauri-apps/tauri/releases/tag/tauri-v1.1.4 release
- github.com/tauri-apps/tauri/releases/tag/tauri-v1.2.5 release
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction
0.52% chance of exploitation in the next 30 days, higher than 44% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 4.8 | CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| NVD | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| GitHub | 3.1 | 4.8 | CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| crates.io | tauri | >=1.0.0, <1.0.9 >=1.1.0, <1.1.4 >=1.2.0, <1.2.5 |
1.0.9 1.1.4 1.2.5 |
Affected products
- tauri-apps tauri
Classification
- Weakness
-
- CWE-601 URL Redirection to Untrusted Site
References
-
github.com
/tauri-apps/tauri/commit/58ea0b45268dbd46cbac0ebb0887353d057ca767
web, patch
-
github.com
/tauri-apps/tauri/commit/fa90214b052b1a5d38d54fbf1ca422b4c37cfd1f
web, patch
-
github.com
/tauri-apps/tauri/commit/9c0593c33af52cd9e00ec784d15f63efebdf039c
web
-
github.com
/tauri-apps/tauri/security/advisories/GHSA-4wm2-cwcf-wwvp
web, vendor-advisory
-
github.com
/tauri-apps/tauri/releases/tag/tauri-v1.0.9
web, release-notes
-
github.com
/tauri-apps/tauri/releases/tag/tauri-v1.1.4
web, release-notes
-
github.com
/tauri-apps/tauri/releases/tag/tauri-v1.2.5
web, release-notes
-
nvd.nist.gov
/vuln/detail/CVE-2023-31134
advisory
-
en.wikipedia.org
/wiki/Open_redirect
web
-
github.com
/tauri-apps/tauri
package
-
tauri.app
/v1/api/config/#securityconfig.dangerousremotedomainipcaccess
web
Sources
- CVE List CVE-2023-31134
- GitHub Advisory GHSA-4wm2-cwcf-wwvp
- NVD CVE-2023-31134
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.