Lucene search
PRIOn knowledge basePRION:CVE-2021-24288HistoryMay 17, 2021 - 5:15 p.m.
Design/Logic Flaw
2021-05-1717:15:00
PRIOn knowledge base
www.prio-n.com
7
When subscribing using AcyMailing, the ‘redirect’ parameter isn’t properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.
| CPE | Name | Operator | Version |
|---|---|---|---|
| acymailing | lt | 7.5.0 |
Related
wpvulndb
wpvulndb
AcyMailing < 7.5.0 - Open Redirect
2021-04-29 00:00:00
cvelist
cvelist
CVE-2021-24288 AcyMailing < 7.5.0 - Unauthenticated Open Redirect
2021-05-17 16:48:52
cve
cve
CVE-2021-24288
2021-05-17 17:15:08
nuclei
nuclei
WordPress AcyMailing <7.5.0 - Open Redirect
2021-08-31 03:35:08
nvd
nvd
CVE-2021-24288
2021-05-17 17:15:08
patchstack
patchstack
wpexploit
wpexploit
AcyMailing < 7.5.0 - Open Redirect
2021-04-29 00:00:00