The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.

Published Dec 9, 2023 · Updated Aug 2, 2024 · Assigned by mitre