CVE-2020-5607

Опубликовано: 10 июл. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Ссылки

https://github.com/shirasagi/shirasagi
Third Party Advisory
https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a
Patch
Third Party Advisory
https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a.patch
Mailing List
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN55657988/index.html
Third Party Advisory
https://www.ss-proj.org/
Vendor Advisory
https://github.com/shirasagi/shirasagi
Third Party Advisory
https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a
Patch
Third Party Advisory
https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a.patch
Mailing List
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN55657988/index.html
Third Party Advisory
https://www.ss-proj.org/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ss-proj:shirasagi:*:*:*:*:*:*:*:*

Версия до 1.13.1 (включая)

EPSS

Процентиль: 69%

0.00591

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-c3wx-j258-5j4j