Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN74699196/index.html | Third Party Advisory |
https://github.com/shirasagi/shirasagi | Third Party Advisory |
https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3 | Patch Third Party Advisory |
https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3.patch | Patch Third Party Advisory |
https://www.ss-proj.org/ | Release Notes Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: jpcert
Published: 2019-09-12T15:58:55
Updated: 2019-09-12T15:58:55
Reserved: 2019-01-10T00:00:00
Link: CVE-2019-6009
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-09-12T17:15:14.623
Modified: 2019-09-13T13:35:15.567
Link: CVE-2019-6009
JSON object: View
Redhat Information
No data.
CWE