Auto Generated CVE annotations [Mon Jul 18 08:18:24 UTC 2022] 🤖

patch-1
GitHub Action 2022-07-18 08:18:24 +00:00
parent 093fd3a63a
commit ad9446bfa1
1 changed files with 3 additions and 2 deletions

View File

@ -3,15 +3,16 @@ id: CVE-2015-4668
info:
name: Xsuite 2.4.4.5 - Open Redirect
author: 0x_Akoko
severity: low
severity: medium
description: |
Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.
reference:
- https://www.modzero.com/advisories/MZ-15-02-Xceedium-Xsuite.txt
- https://www.cvedetails.com/cve/CVE-2015-4668
- https://vuldb.com/?id.107082
- https://www.exploit-db.com/exploits/37708/
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2015-4668
cwe-id: CWE-601