Unscored CVE-2019-6009 EUVD-2019-15577GHSA-cj2c-3w92-rj4x

Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct ph…

Published Sep 12, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Open redirect vulnerability in SHIRASAGI v1.7.0 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SHIRASAGI Project	SHIRASAGI	v1.7.0 and earlier	—

References

https://www.ss-proj.org/
https://github.com/shirasagi/shirasagi
https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3
https://github.com/shirasagi/shirasagi/commit/6016948ea535e51b16535888af13df064a1a15d3.patch
http://jvn.jp/en/jp/JVN74699196/index.html