CVE-2020-13121

MEDIUM NUCLEI

Submitty <= 20.04.01 - Open Redirect via Login Old Parameter

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2020-13121 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.

Nuclei Templates (1)

Submitty <= 20.04.01 - Open Redirect
MEDIUMby 0x_Akoko

References (1)

Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/Submitty/Submitty/issues/5265

Scores

CVSS v3 6.1
EPSS 0.0352
EPSS Percentile 87.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-601
Status published
Products (1)
rcos/submitty < 20.04.01
Published May 16, 2020
Tracked Since Feb 18, 2026