CVE-2018-14474

CVE-2018-14474

Published · Updated

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 2.3%
exploitation probability
2.3%top 17% of all CVEs
observed exploitation
nono source reports it
views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.
Affected products
n/a · n/a