Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2pp8-cqff-m6w4

Опубликовано: 26 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

EPSS

Процентиль: 55%
0.00323
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
nvd
около 2 лет назад

Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

CVSS3: 4.7
fstec
около 2 лет назад

Уязвимость CMS-системы PowerCMS, связанная с использованием открытой переадресации, позволяющая нарушителю перенаправить пользователей на произвольные веб-сайты

EPSS

Процентиль: 55%
0.00323
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601