Логотип exploitDog
bind:CVE-2024-53995
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-53995

Количество 2

Количество 2

nvd логотип

CVE-2024-53995

около 1 года назад

SickChill is an automatic video library manager for TV shows. A user-controlled `login` endpoint's `next_` parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open redirect. Commit c7128a8946c3701df95c285810eb75b2de18bf82 changes the login page to redirect to `settings.DEFAULT_PAGE` instead of to the `next` parameter.

EPSS: Низкий
github логотип

GHSA-6gf2-ffq8-gcww

около 1 года назад

GHSL-2024-288: SickChill open redirect in login

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-53995

SickChill is an automatic video library manager for TV shows. A user-controlled `login` endpoint's `next_` parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open redirect. Commit c7128a8946c3701df95c285810eb75b2de18bf82 changes the login page to redirect to `settings.DEFAULT_PAGE` instead of to the `next` parameter.

0%
Низкий
около 1 года назад
github логотип
GHSA-6gf2-ffq8-gcww

GHSL-2024-288: SickChill open redirect in login

0%
Низкий
около 1 года назад

Уязвимостей на страницу