CVE-2018-16174

Опубликовано: 09 янв. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Ссылки

https://jvn.jp/en/jp/JVN85760090/index.html
Third Party Advisory
https://wordpress.org/plugins/learnpress/
Third Party Advisory
https://jvn.jp/en/jp/JVN85760090/index.html
Third Party Advisory
https://wordpress.org/plugins/learnpress/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:thimpress:learnpress:*:*:*:*:*:wordpress:*:*

Версия до 3.1.0 (исключая)

EPSS

Процентиль: 42%

0.00201

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-r3vj-4pqv-mmhx