2017-01-13

2017-01-14

2017-01-15

All (1) Critical (2) High (7) Medium (1)

CVE-2017-5474 Jan 14, 07:59 MEDIUM PATCH This Month

Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP Open Redirect Serendipity S9Y

NVD GitHub VulDB

CVSS 3.0

6.1

EPSS

0.2%