CVE-2021-20105

MEDIUM

Machform < 16 - Open Redirect via Safari_init.php Ref Parameter

Title source: llm

Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.

Core 1

Core References

Third Party Advisory x_refsource_misc

CVSS v3 6.1

EPSS 0.0074

EPSS Percentile 49.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-601

Status published

Products (1)

machform/machform < 16

Published Jun 29, 2021

Tracked Since Feb 18, 2026