CVE-2017-5614

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-03-03

Last modified

2024-08-05

Weaknesses

CWE-601

Affected products

• Cpanel (Cpanel)

References

• http://www.openwall.com/lists/oss-security/2017/01/28/8
• http://www.securityfocus.com/bid/95870
• https://news.cpanel.com/tsr-2017-0001-full-disclosure/