Lucene search
GoogleOSV:GHSA-JP55-VVMF-63MVHistoryFeb 09, 2022 - 9:42 p.m.
URL Redirection to Untrusted Site ('Open Redirect')
2022-02-0921:42:47
Google
osv.dev
7
0.001 Low
EPSS
Percentile
30.8%
Impact
There’s no protection against URL redirection to untrusted site, in particular some well known parameters (xredirect) can be used to perform such redirections.
Patches
The problem has been patched in XWiki 12.10.7 and XWiki 13.3RC1.
Workarounds
There’s no known workaround for this issue.
References
https://jira.xwiki.org/browse/XWIKI-10309
For more information
If you have any questions or comments about this advisory:
- Open an issue in JIRA
- Email us at Security ML
Related
osv
osv
CVE-2022-23618
2022-02-09 21:15:07
cve
cve
CVE-2022-23618
2022-02-09 21:15:07
prion
prion
Design/Logic Flaw
2022-02-09 21:15:00
openvas
openvas
XWiki Open Redirect Vulnerability (GHSA-jp55-vvmf-63mv)
2022-02-11 00:00:00
cnvd
cnvd
XWiki Platform input validation error vulnerability
2022-02-13 00:00:00
cvelist
cvelist
CVE-2022-23618 Open Redirect in xwiki-platform
2022-02-09 21:05:11
nvd
nvd
CVE-2022-23618
2022-02-09 21:15:07
github
github
URL Redirection to Untrusted Site ('Open Redirect')
2022-02-09 21:42:47