medium6.1
CVE-2017-1000027
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthor…
Impact
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Koozali | Sme Server | Versions 8.0, 9.0, 9.2, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/
- https://forums.contribs.org/index.php/topic%2C52838.0.html
- https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/
- https://forums.contribs.org/index.php/topic%2C52838.0.html