medium6.1
CVE-2018-14474
views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.
Impact
views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Goodoldweb | Orange Forum | Version 1.4.0 |