Lucene search

GitHub Advisory DatabaseGHSA-R6H7-846C-8M78

HistoryMay 14, 2022 - 1:11 a.m.

Elgg open redirect

2022-05-1401:11:26

CWE-601

GitHub Advisory Database

github.com

elgg

open redirect

version 1.12.18

version 2.3.x

version 2.3.11

software

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

49.8%

JSON

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.

Affected configurations

Vulners

Node

elggelggRange<2.3.11

elggelggRange<1.12.18

References

elgg.org/blog/view/2913744/security-release-elgg-11218-and-2311

github.com/advisories/GHSA-r6h7-846c-8m78

github.com/Elgg/Elgg/releases/tag/1.12.18

github.com/Elgg/Elgg/releases/tag/2.3.11

nvd.nist.gov/vuln/detail/CVE-2019-11016

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

49.8%

JSON

Related for GHSA-R6H7-846C-8M78