CVE-2019-11016

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

CVE-2019-11016

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect...

CVE-2019-11016

CVE-2019-11016 affects the Elgg framework prior to 1.12.18 and 2.3.x prior to 2.3.11. The vulnerability is an open redirect triggered by unsanitized or misused redirect logic (via the url parameter), enabling attackers to craft links that redirect victims to attacker-controlled sites. Exploitatio...