Priority LOW 21
Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a different host without restricting the redirect destination.
Vulnerabilities
2 records
Priority LOW 21
The FTP client trusts the server's PASV response IP:port without validation against the control connection target.