Description (CNA)
Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://forums.contribs.org/index.php/topic%2C52838.0.html
- https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/
ADP enrichment
No English description supplied.