CVE-2018-15683
05.09.2018, 21:29
An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected.
| Vendor | Product | Version |
|---|---|---|
| btiteam | xbtit | 𝑥 ≤ 2.5.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration