medium6.1
CVE-2020-22840
Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resourc…
Impact
Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B2evolution | B2evolution | before 6.11.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161362/b2evolution-CMS-6.11.6-Open-Redirection.html
- https://github.com/b2evolution/b2evolution/issues/102
- https://www.exploit-db.com/exploits/49554
- http://packetstormsecurity.com/files/161362/b2evolution-CMS-6.11.6-Open-Redirection.html
- https://github.com/b2evolution/b2evolution/issues/102
- https://www.exploit-db.com/exploits/49554