Lucene search
K

8 matches found

CNVD
CNVD
added 2021/04/02 12:0 a.m.5 views

Elastic EpiServer Find Arbitrary Redirection Vulnerability

Elastic EpiServer Find is an open source application from Elastic. A search engine that enables developers to build great search experiences on websites , Intranet and almost any type of system with text content . An arbitrary redirection vulnerability in EpiServer Find versions prior to 13.2.7 c...

6.1CVSS6.7AI score0.0474EPSS
Exploits1References1
OSV
OSV
added 2021/03/31 10:15 p.m.1 views

CVE-2020-24550

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the tredirect parameter in a crafted URL, such as a /findv2/click URL...

6.1CVSS5.8AI score0.0474EPSS
Exploits1References1
NVD
NVD
added 2021/03/31 10:15 p.m.6 views

CVE-2020-24550

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the tredirect parameter in a crafted URL, such as a /findv2/click URL...

6.1CVSS0.0474EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2021/03/31 10:15 p.m.0 views

CVE-2020-24550

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the tredirect parameter in a crafted URL, such as a /findv2/click URL...

6.1CVSS5.5AI score0.0474EPSS
Exploits1References3
Prion
Prion
added 2021/03/31 10:15 p.m.16 views

Open redirect

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the tredirect parameter in a crafted URL, such as a /findv2/click URL...

5.8CVSS6AI score0.0474EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/03/31 9:32 p.m.71 views

CVE-2020-24550

CVE-2020-24550 refers to an open redirect vulnerability in EpiServer Find prior to version 13.2.7 . The issue is exploitable via the _t_redirect parameter in crafted URLs (e.g., a /find_v2/_click URL), allowing an attacker to redirect users to untrusted websites. The nuclei template confirms the ...

6.1CVSS6.1AI score0.0474EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/03/31 9:32 p.m.11 views

CVE-2020-24550

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the tredirect parameter in a crafted URL, such as a /findv2/click URL...

6.1AI score0.0474EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/31 12:0 a.m.2 views

Elastic EpiServer Find 输入验证错误漏洞

Elastic EpiServer Find is an open source application from Elastic. A search engine that enables developers to build great search experiences on websites , Intranet and almost any type of system with text content . An arbitrary redirection vulnerability in EpiServer Find versions prior to 13.2.7 c...

6.1CVSS5.9AI score0.0474EPSS
Exploits1References2
Rows per page
Query Builder