medium5.4
CVE-2025-11190
The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled webs…
Impact
The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synchroweb | Kiwire | Version 3.6 |