5.8

CVE-2012-4489

Exploit
Open redirect vulnerability in the securelogin_secure_redirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mark Burdett ≫ Securelogin Version7.x-1.0
   Drupal ≫ Drupal Version-
Mark Burdett ≫ Securelogin Version7.x-1.1
   Drupal ≫ Drupal Version-
Mark Burdett ≫ Securelogin Version7.x-1.2
   Drupal ≫ Drupal Version-
Mark Burdett ≫ Securelogin Version7.x-1.x Updatedev
   Drupal ≫ Drupal Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.48% 0.706
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.openwall.com/lists/oss-security/2012/10/04/6
http://www.openwall.com/lists/oss-security/2012/10/07/1
http://drupal.org/node/1700594
Patch
Vendor Advisory
http://drupalcode.org/project/securelogin.git/commitdiff/88518df
Patch
Exploit
http://www.securityfocus.com/bid/54675
https://drupal.org/node/1692976
Patch
Vendor Advisory
https://drupal.org/node/1698988
Patch