CVE-2018-17422

MEDIUMNuclei

DotCMS < 5.0.2 - Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2018-17422 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMDotCMS < 5.0.2 - Open RedirectCVSS 6.1

dotCMS before 5.0.2 contains multiple open redirect vulnerabilities via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Impact

An attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the installation of malware.

Remediation

Upgrade to a version of DotCMS that is higher than 5.0.2 to mitigate the open redirect vulnerability.

WeaknessesCWE-601
Authors0x_Akoko, daffainfo
Template tagscve2018cveredirectdotcmsvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*
Shodan: http.title:"dotCMS"
Shodan: http.title:"dotcms"
FOFA: title="dotcms"
Google: intitle:"dotcms"
https://github.com/dotCMS/core/issues/15286 https://nvd.nist.gov/vuln/detail/CVE-2018-17422 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

2