Open URL Redirect Vulnerability in Koozali Foundation SME Server
CVE-2017-1000027

6.1MEDIUM

Key Information:

Vendor

Koozali

Status
Sme Server
Vendor
CVE Published:
13 July 2017

What is CVE-2017-1000027?

The Koozali Foundation SME Server presents a vulnerability in its user web login function, which can be exploited through open URL redirection. This flaw allows attackers to redirect users to unauthorized locations, potentially leading to unauthorized account access and other security incidents. Affected versions include SME Server 8.x, 9.x, and 10.x, making it crucial for users to apply protective measures as outlined in the security advisory.

References

https://forums.contribs.org/index.php/topic%2C52838.0.html
x_refsource_MISC
https://cp270.wordpress.com/2017/02/02/security-advisory-...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.