Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7wqr-p83r-v6rj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

EPSS

Процентиль: 61%
0.0041
Низкий

Связанные уязвимости

CVSS3: 5.3
redhat
больше 5 лет назад

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

CVSS3: 5.3
nvd
больше 5 лет назад

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

CVSS3: 5.3
fstec
больше 5 лет назад

Уязвимость средства управления виртуальной инфраструктурой Ovirt, связанная с использованием открытой переадресации, позволяющая нарушителю перенаправить пользователя на произвольные веб-сайт

EPSS

Процентиль: 61%
0.0041
Низкий