CVE-2018-16761

MEDIUMNuclei

Eventum <3.4.0 - Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2018-16761 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Eventum before 3.4.0 has an open redirect vulnerability.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMEventum <3.4.0 - Open RedirectCVSS 6.1

Eventum before 3.4.0 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Impact

An attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the theft of sensitive information.

Remediation

Upgrade to Eventum version 3.4.0 or later to fix the open redirect vulnerability.

WeaknessesCWE-601
Authors0x_Akoko
Template tagscvecve2018redirecteventumosseventum_projectvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:eventum_project:eventum:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:305412257
FOFA: icon_hash=305412257
https://www.invicti.com/web-applications-advisories/ns-18-021-open-redirection-vulnerabilities-in-eventum/ https://github.com/eventum/eventum/releases/tag/v3.4.0 https://nvd.nist.gov/vuln/detail/CVE-2018-16761 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

2