Code injection

2023-12-0907:15:00

PRIOn knowledge base

www.prio-n.com

code injection

seafile 9.0.6

endpoint security

redirect vulnerability

nvd

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.

CPENameOperatorVersion
seafileeq9.0.6

CPE	Name	Operator	Version
	seafile	eq	9.0.6

References

herolab.usd.de/en/security-advisories/usd-2022-0033/

manual.seafile.com/changelog/server-changelog/