Open Redirect in openwhyd/openwhyd
CVE-2021-3829

7.3HIGH

Key Information:

Vendor

Openwhyd

Status
Openwhyd/openwhyd
Vendor
CVE Published:
10 December 2021

What is CVE-2021-3829?

openwhyd is vulnerable to URL Redirection to Untrusted Site

Affected Version(s)

openwhyd/openwhyd < 1.45.3

References

https://huntr.dev/bounties/6b8acb0c-8b5d-461e-9b46-b1bfb5...
x_refsource_CONFIRM
https://github.com/openwhyd/openwhyd/commit/38707930103dc...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.