Unscored CVE-2020-5607 EUVD-2020-26768GHSA-c3wx-j258-5j4j

Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct p…

Published Jul 10, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SHIRASAGI Project	SHIRASAGI	v1.13.1 and earlier	—

References

https://www.ss-proj.org/
https://github.com/shirasagi/shirasagi
https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a
https://github.com/shirasagi/shirasagi/commit/040a02c9d4b5dd2f91c5c29c0008a47cde6ee99a.patch
https://jvn.jp/en/jp/JVN55657988/index.html