Description (CNA)
In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| floragunn / Search Guard FLX | affected 1.0.0 through 4.0.1 |
CWE
CWE-601
References
- https://search-guard.com/cve-advisory/
- https://docs.search-guard.com/latest/changelog-searchguard-flx-4_1_0
ADP enrichment
No English description supplied.
No references supplied.