CVE-2012-5647

🗓️ 24 Feb 2013 21:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO

Reporter	Title	Published	Views	Family All 13
Cvelist	CVE-2012-5647	24 Feb 201321:00	–	cvelist
EUVD	EUVD-2012-5531	7 Oct 202500:30	–	euvd
Mend	CVE-2012-5647	24 Feb 201321:00	–	mend
NVD	CVE-2012-5647	24 Feb 201321:55	–	nvd
OSV	RHSA-2013:0148 Red Hat Security Advisory: openshift-origin-node-util security update	15 Sep 202420:29	–	osv
Prion	Open redirect	24 Feb 201321:55	–	prion
Positive Technologies	PT-2013-1821	24 Feb 201300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2012-5647: Improper Input Validation	24 Feb 201300:00	–	rapid7
Tenable Nessus	RHEL 6 : openshift-origin-node-util (RHSA-2013:0148)	6 Dec 201800:00	–	nessus
Tenable Nessus	RHCOS 6 : openshift-origin-node-util (RHSA-2013:0148)	4 May 202600:00	–	nessus

NVD

Node

redhat openshiftMatch1.0-enterprise

redhat openshift_originRange≤1.0.5

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2013-0148.html
github	www.github.com/openshift/origin-server/pull/1017
securityfocus	www.securityfocus.com/bid/57189
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
osvdb	www.osvdb.org/89430
github	www.github.com/openshift/origin-server/commit/32564a0839b1517d762afab2013c26c0959bac00

Parameter	Position	Path	Description	CWE
PATH_INFO	path	/node-util/www/html/restorer.php	Open redirect vulnerability via PATH_INFO in restorer.php that can redirect to arbitrary URLs.	CWE-20

16 Jun 2026 23:47Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.8

EPSS0.01459

CWE-20