CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28874

Summary: CVE-2023-28874 affects Seafile 9.0.6, where the next parameter in the /accounts/login endpoint can redirect users to arbitrary sites (an open-redirect issue). The vulnerability is exploitable over the network and requires user interaction; no explicit exploit code or active exploit statu...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...