exploitDog

CVE-2021-27352

Опубликовано: 29 мар. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 4.9

EPSS Низкий

Описание

An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.

Ссылки

https://drive.google.com/file/d/1kSDlPASBCgJEINxTSIsjMWrU4u4T5XCc/view?usp=sharing
Exploit
Third Party Advisory
https://github.com/xoffense/POC/blob/main/Ilch%202.1.42%20Open%20redirect
Exploit
Third Party Advisory
https://www.ilch.de/
Product
https://drive.google.com/file/d/1kSDlPASBCgJEINxTSIsjMWrU4u4T5XCc/view?usp=sharing
Exploit
Third Party Advisory
https://github.com/xoffense/POC/blob/main/Ilch%202.1.42%20Open%20redirect
Exploit
Third Party Advisory
https://www.ilch.de/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ilch:ilch_cms:2.1.42:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00201

Низкий

5.4 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-vhph-xpg2-fjgw

github

больше 3 лет назад

An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.

EPSS

Процентиль: 42%

0.00201

Низкий

5.4 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-601