exploitDog

CVE-2015-1060

Опубликовано: 16 янв. 2015

Источник: nvd

CVSS2: 5.8

EPSS Средний

Описание

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.

Комментарий

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:insanevisions:adaptcms:3.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10183

Средний

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vvvw-jjxx-8hjc

github

больше 3 лет назад

Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.

EPSS

Процентиль: 93%

0.10183

Средний

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other