SA-CONTRIB-2015-055 - Services single sign-on server helper - Open Redirect - Unsupported
Services single sign-on server helper module provides functionality to facilitate account information editing on a remote SSO site. The module doesn't validate some user supplied URLs in parameters used for page redirection. An attacker could trick users to visit malicious sites without realizing...