CVE-2018-14474

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.

mitre·CWE-601·Published 2018-07-20

CVSS

—

EPSS

0.02

KEV

Exploits

cve.orgen

104 chars

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.

NVDen

104 chars

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.

NVDes

114 chars

views/auth.go en Orange Forum 1.4.0 permite la redirección abierta mediante el parámetro next en /login o /signup.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
3.0	Primary	NVD	6.1	2.8	2.7	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N