CVE-2014-1985
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url (back_url parameter).
Produtos afetados
n/a · n/aReferências
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000041.htmlhttp://jvn.jp/en/jp/JVN93004610/index.htmlhttp://seclists.org/oss-sec/2014/q2/84http://secunia.com/advisories/57524https://github.com/redmine/redmine/commit/7567c3d8b21fe67e5f04e6839c1fce061600f2f3http://www.redmine.org/projects/redmine/wiki/Changeloghttp://www.redmine.org/projects/redmine/wiki/Changelog_2_4http://www.redmine.org/projects/redmine/wiki/Security_Advisorieshttp://www.securityfocus.com/bid/66674