Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7126
HistoryJul 23, 2018 - 7:58 a.m.

Open Redirect

2018-07-2307:58:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

EPSS

0.001

Percentile

31.5%

github.com/s-gv/orangeforum is susceptible to open redirect attacks. The attacks exist because views/auth.go does not properly handle the redirectURL parameter in LoginHandler and LogoutHandler, allowing an attacker to create a link to redirect users to a malicious webpage.

EPSS

0.001

Percentile

31.5%