Lucene search
K

8 matches found

CNNVD
CNNVD
added 2025/08/15 12:0 a.m.1 views

BunkerWeb 输入验证错误漏洞

BunkerWeb is an open source web application firewall from Bunkerity Open Source. An input validation error vulnerability exists in BunkerWeb version 1.6.2, which stems from URL redirection to an untrusted site and could lead to phishing attacks...

4.8CVSS6.7AI score0.00079EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/12/02 10:17 p.m.16 views

BunkerWeb has Open Redirect Vulnerability in Loading Page

Summary: A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. Details: The loading endpoint accepts and uses an unvalidated "next" parameter for redirects: PoC: Visit:...

5.1CVSS6.6AI score0.00081EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/12/02 10:17 p.m.12 views

GHSA-Q9RR-H3HX-M87G BunkerWeb has Open Redirect Vulnerability in Loading Page

Summary: A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. Details: The loading endpoint accepts and uses an unvalidated "next" parameter for redirects: PoC: Visit:...

5.1CVSS6.2AI score0.00081EPSS
Exploits0References3
OSV
OSV
added 2024/12/02 8:6 p.m.6 views

GO-2024-3294 Open Redirect Vulnerability in Loading Page in bunkerweb in github.com/bunkerity/bunkerweb

Open Redirect Vulnerability in Loading Page in bunkerweb in github.com/bunkerity/bunkerweb...

5.1CVSS6.3AI score0.00081EPSS
Exploits0References2
NVD
NVD
added 2024/11/27 7:15 p.m.8 views

CVE-2024-53264

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated...

5.1CVSS0.00081EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/27 6:31 p.m.10 views

CVE-2024-53264 Open Redirect Vulnerability in Loading Page in bunkerweb

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated...

5.1CVSS0.00081EPSS
Exploits0References1
OSV
OSV
added 2024/11/27 6:31 p.m.1 views

CVE-2024-53264 Open Redirect Vulnerability in Loading Page in bunkerweb

bunkerweb is an Open-source and next-generation Web Application Firewall WAF. A open redirect vulnerability exists in the loading endpoint, allowing attackers to redirect authenticated users to arbitrary external URLs via the "next" parameter. The loading endpoint accepts and uses an unvalidated...

5.1CVSS6.8AI score0.00081EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/27 12:0 a.m.1 views

BunkerWeb 输入验证错误漏洞

BunkerWeb is an open source web application firewall from Bunkerity Open Source. An input validation error vulnerability exists in BunkerWeb version 1.5.11 and earlier, which stems from the presence of an open redirection vulnerability that allows an attacker to redirect an authenticated user to ...

5.1CVSS6.4AI score0.00081EPSS
Exploits0References2
Rows per page
Query Builder