CVE-2017-2166 Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
MediumCVSS 6.1
EPSS 0.77%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| groupsession | <= 4.7.0 | No fix listed |
| Japan Total System Co.,Ltd. GroupSession | = version 4.7.0 and earlier | No fix listed |
References
- JVN#26200083 third-party-advisory vdb-entry