CVE-2020-13121

2020-05-1620:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.

CPENameOperatorVersion
submittyeq0.1.1/0.1.1
submittyeq20.03.00
submittyeq0.2.1
submittyeq0.4.3
submittyeq.1.0.1
submittyeqpre_migration
submittyeq0.4.2.1
submittyeq19.10.00
submittyeq19.12.00
submittyeq20.03.01

Name	Operator	Version
submitty	eq	0.1.1/0.1.1
submitty	eq	20.03.00
submitty	eq	0.2.1
submitty	eq	0.4.3
submitty	eq	.1.0.1
submitty	eq	pre_migration
submitty	eq	0.4.2.1
submitty	eq	19.10.00
submitty	eq	19.12.00
submitty	eq	20.03.01