Description (CNA)
V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect mechanism.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Guangzhou V / V-SOL GPON/EPON OLT Platform | affected V2.03.62R_IPv6; affected V2.03.54R; affected V2.03.52R; affected V2.03.49; affected V2.03.47; affected V2.03.40; affected V2.03.26; affected V2.03.24; affected V1.8.6; affected V1.4 |
CWE
CWE-601
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5535.php
- https://packetstormsecurity.com/files/154628
- https://exchange.xforce.ibmcloud.com/vulnerabilities/167772
- https://cxsecurity.com/issue/WLB-2019090193
- https://www.vsolcn.com/
ADP enrichment
No English description supplied.
No references supplied.