Lucene search

K
jvnJapan Vulnerability NotesJVN:55398821
HistoryNov 02, 2012 - 12:00 a.m.

JVN#55398821: Pebble vulnerable to open redirect

2012-11-0200:00:00
Japan Vulnerability Notes
jvn.jp
9

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

72.0%

Pebble is an open source weblog system. Pebble contains an open redirect vulnerability.

Impact

When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Pebble versions prior to 2.6.4

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

72.0%

Related for JVN:55398821