Lucene search

K
cve[email protected]CVE-2011-5252
HistoryJan 12, 2013 - 4:33 a.m.

CVE-2011-5252

2013-01-1204:33:00
CWE-20
web.nvd.nist.gov
19
open redirect
vulnerability
orchard
phishing
nvd
cve-2011-5252

7.4 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.02 Low

EPSS

Percentile

88.9%

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.

7.4 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.02 Low

EPSS

Percentile

88.9%

Related for CVE-2011-5252