CVE-2014-2213 Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the...
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to portal/scr_sendmd5.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| posh project posh | >= 3.0, <= 3.2.1 | No fix listed |
References
- seclists.org mailing-list third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry
- sysdream.com exploit third-party-advisory