CVE-2018-8937
EUVD-2018-2054526.03.2018, 17:29
An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| open-audit | open-audit | 2.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration