Description
Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them to a malicious site and compromise them. Exploitation of this vulnerability is possible due to the fact that there is no proper sanitization of the 'URI' parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alkacon | Open CMS | 14, 15 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- OpenCms 14 & 15 - Open Redirect http/cves/2023/CVE-2023-6380.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.