Description
The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synchroweb | Kiwire | 3.6 | — |
Medium · 5.4
CVE-2025-11190
EUVD-2025-33713GHSA-6425-32p4-2c56
CVE-2025-11190
Published Oct 10, 2025 · Updated Nov 3, 2025 · Assigned by certcc