CVE-2018-14474

Published July 20th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

5.8

MEDIUM

Affected

1

PROJECT

Description

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.

s-gv/orangeforum

A light-weight forum

GitHub

442