Unscored CVE-2014-2213 EUVD-2014-2253GHSA-9gvx-79rg-73x7

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbi…

Published Nov 22, 2019 · Updated Aug 6, 2024 · Assigned by mitre

Description

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to portal/scr_sendmd5.php.

References

http://seclists.org/oss-sec/2014/q1/444
http://www.securityfocus.com/bid/65843
https://sysdream.com/news/lab/posh-3-2-1-multiple-vulnerabilities/