2 matches found
CVE-2021-21354
Pollbot (open source) before version 1.4.4 contains an open redirect vulnerability in the path https://pollbot.services.mozilla.com/. An attacker can induce redirection to a attacker-controlled site (e.g., via a payload like //evil.com/). The issue affects versions prior to 1.4.4 and is fixed in ...
CVE-2022-0637
CVE-2022-0637 is an open redirect vulnerability in Mozilla PollBot (pollbot.services.mozilla.com) affecting versions before 1.4.6. The issue is described across Red Hat, OSV, CNVD/CNNVD and related feeds as an open redirect vulnerability; details consistently note an ability to redirect users to ...