OrangeForum 1.4.0 Open Redirection

An open redirection vulnerability exists in OrangeForum version 1.4.0. The vulnerability allows remote attackers to redirect users to arbitrary external websites. This issue is older research added to the archive...

OrangeForum 1.4.0 Open Redirection

Open Redirection Vulnerabilities in OrangeForum 1.4.0 Information -------------------- Advisory by Netsparker Name: Open Redirection Vulnerabilities in OrangeForum 1.4.0 Affected Software: OrangeForum Affected Versions: 1.4.0 Homepage: https://github.com/s-gv/orangeforum Vulnerability: Open...

Open Redirect

github.com/s-gv/orangeforum is susceptible to open redirect attacks. The attacks exist because views/auth.go does not properly handle the redirectURL parameter in LoginHandler and LogoutHandler, allowing an attacker to create a link to redirect users to a malicious webpage...