CVE-2017-18178 Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This i...
MediumCVSS 6.1
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress sitefinity | = 9.1 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- www.sec-consult.com exploit third-party-advisory