Lucene search
+L

328 matches found

CVE
CVE
•added 2022/04/19 11:20 a.m.•98 views

CVE-2022-0645

CVE-2022-0645 is an open redirect vulnerability in the PostHog application (pre-1.34.1) exposed via the authorize_and_redirect/?redirect= endpoint. Affected component is the redirect handling in posthog/posthog. The Red Hat/NVD entries confirm the issue and point to open redirects leading to pote...

6.1CVSS6.3AI score0.00799EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2022/04/19 11:20 a.m.•26 views

CVE-2022-0645 Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog

Open redirect vulnerability via endpoint authorizeandredirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1...

6.1CVSS6.4AI score0.00799EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/04/19 11:20 a.m.•52 views

CVE-2022-0645 Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog

Open redirect vulnerability via endpoint authorizeandredirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1...

6.1CVSS6.5AI score0.00799EPSS
SaveExploits1References2
Mend
Mend
•added 2022/04/19 11:20 a.m.•9 views

CVE-2022-0645

Open redirect vulnerability via endpoint authorizeandredirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1...

6.1CVSS0.00799EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•12 views

CVE-2022-0645: URL Redirection to Untrusted Site

Open redirect vulnerability via endpoint authorizeandredirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1...

6.1CVSS6.3AI score0.00799EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/19 12:00 a.m.•7 views

PT-2022-13326

Name of the Vulnerable Software and Affected Versions posthog/posthog versions prior to 1.34.1 Description The issue is related to an open redirect vulnerability via the "authorize and redirect/?redirect=" endpoint in the posthog/posthog GitHub repository. Recommendations For versions prior to...

6.1CVSS5.8AI score0.00799EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2022/04/19 12:00 a.m.•22 views

Posthog input validation vulnerability

posthog is a software application. A security vulnerability exists in posthog versions prior to 1.34.1, which stems from a redirection issue with authorizeandredirect/?redirect= in the application...

6.1CVSS6.2AI score0.00799EPSS
SaveExploits1References3
Huntr
Huntr
•added 2022/03/22 7:28 p.m.•41 views

Open redirect vulnerability via endpoint authorize_and_redirect/?redirect=

Description Posthog application is vulnerable to open redirect which can be exploited by adding authorizeandredirect/?redirect=https://evil.com endpoint. Proof of Concept 1.Open the link https://app.posthog.com/login?next=/authorizeandredirect/%3Fredirect%3Dhttps%25253A%25252F%25252Fevil.com...

5.8CVSS0.9AI score0.04718EPSS
SaveExploits3References1
Rows per page
Query Builder