Skip to content
OpenAdvisories
Medium · 6.1 CVE-2019-6035 EUVD-2022-3385GHSA-9hg5-7hwc-v434

Athenz vulnerable to Open Redirect

Published Dec 26, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.

Affected products

VendorProductAffectedFixed
Verison Media Athenz v1.8.24 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.yahoo.athenz:athenz < 1.8.25 1.8.25 GHSA-9hg5-7hwc-v434

References