Lucene search

K
cve[email protected]CVE-2011-5079
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5079

2022-10-0316:15:12
CWE-20
web.nvd.nist.gov
16
cve-2011-5079
open redirect
modern faq
irfaq extension
typo3
phishing attacks
nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.8%

Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the “return url parameter.”

Affected configurations

NVD
Node
netcreatorsirfaqRange1.1.2
OR
netcreatorsirfaqMatch1.0.1
OR
netcreatorsirfaqMatch1.0.2
OR
netcreatorsirfaqMatch1.1.0
OR
netcreatorsirfaqMatch1.1.1
AND
typo3typo3

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.8%

Related for CVE-2011-5079