Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-6025

Опубликовано: 26 дек. 2019
Источник: nvd
CVSS3: 6.1
CVSS2: 5.8
EPSS Низкий

Описание

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Advanced 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type Advanced 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type Advanced 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Premium 1.24 and earlier (Movable Type Premium), and Movable Type Premium (Advanced Edition) 1.24 and earlier (Movable Type Premium) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*
Версия от 6.0 (включая) до 6.3.9 (включая)
cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*
Версия от 7.0 (включая) до 7.1.3 (включая)
cpe:2.3:a:sixapart:movable_type:6.5.0:*:*:*:*:*:*:*
cpe:2.3:a:sixapart:movable_type:6.5.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*
Версия до 1.24 (включая)
cpe:2.3:a:sixapart:movable_type:*:*:*:*:premium:*:*:*
Версия до 1.24 (включая)
cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*
Версия от 6.0 (включая) до 6.3.9 (включая)
cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*
Версия от 7.0 (включая) до 7.1.3 (включая)
cpe:2.3:a:sixapart:movable_type:6.5.0:*:*:*:advanced:*:*:*
cpe:2.3:a:sixapart:movable_type:6.5.1:*:*:*:advanced:*:*:*

EPSS

Процентиль: 59%
0.0039
Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

debian логотип

CVE-2019-6025

CVSS3: 6.1
debian
около 6 лет назад

Open redirect vulnerability in Movable Type series Movable Type 7 r.46 ...

github логотип

GHSA-cc2h-7vfw-mgxv

github
больше 3 лет назад

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Advanced 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type Advanced 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type Advanced 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Premium 1.24 and earlier (Movable Type Premium), and Movable Type Premium (Advanced Edition) 1.24 and earlier (Movable Type Premium) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

EPSS

Процентиль: 59%
0.0039
Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601