open redirect to a remote website which can phish users

开放重定向 / 开放重定向 / #1397804

厂商

Concrete CMS

严重程度

低危 · CVSS 5.4

赏金

—

弱点

开放重定向

研究员

@adrian_t

披露日期

2022-11-25

资产

https://github.com/concrete5/concrete5

CVE

—

该报告还没有中文解读。

By Adding some extra headers in the request I noticed that the user is redirected to a remote website. This can lead to stealing a user credentials (phishing) on a remote server.