medium6.1
CVE-2023-28874
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
Impact
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seafile | Seafile | Version 9.0.6 |