CVE-2021-39501

MEDIUMNuclei

EyouCMS 1.5.4 Open Redirect

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2021-39501 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMEyouCMS 1.5.4 Open RedirectCVSS 6.1

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function.

Impact

Successful exploitation of this vulnerability could lead to phishing attacks, credential theft,.

Remediation

Apply the latest security patch or upgrade to a newer version of EyouCMS to mitigate the vulnerability.

WeaknessesCWE-601
Authors0x_Akoko
Template tagscve2021cveredirecteyoucmscmsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:eyoucms:eyoucms:1.5.4:*:*:*:*:*:*:*
FOFA: title="eyoucms"
https://github.com/eyoucms/eyoucms/issues/17 https://github.com/KietNA-HPT/CVE https://nvd.nist.gov/vuln/detail/CVE-2021-39501 https://github.com/ARPSyndicate/kenzer-templates https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3