Lucene search

K
cveMitreCVE-2015-5062
HistoryJun 24, 2015 - 2:59 p.m.

CVE-2015-5062

2015-06-2414:59:04
mitre
web.nvd.nist.gov
28
cve-2015-5062
open redirect
silverstripe cms
framework 3.1.13
remote attackers
phishing attacks
url parameter

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

73.0%

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.

Affected configurations

Nvd
Node
silverstripesilverstripeMatch3.1.13
VendorProductVersionCPE
silverstripesilverstripe3.1.13cpe:2.3:a:silverstripe:silverstripe:3.1.13:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

73.0%