Goodoldweb

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Goodoldweb records in CISA KEV

No Goodoldweb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Orange Forum · all components

TI-2018-10387 CVE-2018-14474 · GHSA-7677-v8cp-hpxg

LOW 32

views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02257 Published 2018-07-20 No fix listed CWE-601