Description
Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1.
Unscored
CVE-2017-18178
EUVD-2017-9313GHSA-w34g-4jqc-cw8g
Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, …
Published Feb 12, 2018 · Updated Sep 16, 2024 · Assigned by mitre