CVE-2017-9464

Опубликовано: 14 июн. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated.

Ссылки

https://github.com/Piwigo/Piwigo/issues/706
Issue Tracking
Patch
Third Party Advisory
https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-007
Issue Tracking
Third Party Advisory
https://github.com/Piwigo/Piwigo/issues/706
Issue Tracking
Patch
Third Party Advisory
https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-007
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*

Версия до 2.9.0 (включая)

EPSS

Процентиль: 41%

0.00192

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2017-9464

CVSS3: 6.1

debian

больше 8 лет назад

An open redirect vulnerability is present in Piwigo 2.9 and probably p ...

GHSA-3f9q-jjqq-4g32

CVSS3: 6.1

github

больше 3 лет назад

EPSS

Процентиль: 41%

0.00192

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601