Open Redirect Vulnerability in Kentico CMS by Kentico Software
CVE-2015-7823

Currently unrated

Key Information:

Vendor

Kentico

Status
Kentico Cms
Vendor
CVE Published:
21 October 2015

What is CVE-2015-7823?

An open redirect vulnerability exists in the CMSPages/GetDocLink.ashx file of Kentico CMS versions 8.2 through 8.2.41. This flaw allows remote attackers to redirect users to arbitrary external websites by crafting a malicious URL in the link parameter. Exploiting this vulnerability can lead to phishing attacks, where attackers mimic legitimate sites to steal sensitive information from unsuspecting users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://packetstormsecurity.com/files/133981/Kentico-CMS-8...
x_refsource_MISC

EPSS Score

12% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.