Description
An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://drive.google.com/file/d/1kSDlPASBCgJEINxTSIsjMWrU4u4T5XCc/view?usp=sharing
Product x_refsource_misc
https://www.ilch.de/
Exploit, Third Party Advisory x_refsource_misc
https://github.com/xoffense/POC/blob/main/Ilch%202.1.42%20Open%20redirect
Scores
CVSS v3
5.4
EPSS
0.0083
EPSS Percentile
52.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-601
Status
published
Products (1)
ilch/ilch_cms
2.1.42
Published
Mar 29, 2021
Tracked Since
Feb 18, 2026