CVE-2019-6020

EUVD-2019-15588
Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
alfasadopowercms
3.01 ≤
𝑥
≤ 3.293
alfasadopowercms
4.0 ≤
𝑥
≤ 4.42
alfasadopowercms
5.0 ≤
𝑥
≤ 5.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN34634458/index.html
https://www.powercms.jp/news/release-powercms-201910.html
http://jvn.jp/en/jp/JVN34634458/index.html
https://www.powercms.jp/news/release-powercms-201910.html