CVE-2017-5614

MEDIUM

cPanel 11.54.0.0-11.54.0.35 - Open Redirect via cgiemail/cgiecho Success/Failure Parameter

Title source: llm
STIX 2.1

Description

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/95870
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2017/01/28/8

Scores

CVSS v3 6.1
EPSS 0.0038
EPSS Percentile 59.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-601
Status published
Products (1)
cpanel/cpanel 11.54.0.0 - 11.54.0.36
Published Mar 03, 2017
Tracked Since Feb 18, 2026