Description

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.

Remediation

References

CVE-2015-5062

Related Vulnerabilities

WordPress Plugin Contextual Related Posts Multiple Vulnerabilities (3.3.1)

WordPress Plugin DELUCKS SEO Cross-Site Scripting (2.1.7)

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3730)

WordPress Plugin HubSpot All-In-One Marketing-Forms, Popups, Live Chat Cross-Site Scripting (7.5.5)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8147)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2015-5062