Vendors / Redirection Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Redirection records in CISA KEV No Redirection vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances.
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02029 · Published 2018-06-26 · No fix listed CWE-502
Priority LOW 36
Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allows admins to execute any PHP file in the filesystem.
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01959 · Published 2018-06-26 · No fix listed CWE-601
Priority LOW 29
The redirection plugin before 2.2.12 for WordPress has XSS, a different issue than CVE-2011-4562.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00923 · Published 2019-08-28 · No fix listed CWE-79
Priority LOW 29
The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00923 · Published 2019-08-28 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 2 0 0
