CVE-2017-1000027

Published: Jul 17, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.

Affected (4)

Products: Koozali: Sme Server

Koozali

1 product

Sme Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Koozali Sme Server	Version 10.0
Koozali Sme Server	Version 8.0
Koozali Sme Server	Version 9.0
Koozali Sme Server	Version 9.2

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (4)

https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/

Source: cve@mitre.org

Third Party Advisory

https://forums.contribs.org/index.php/topic%2C52838.0.html

Source: cve@mitre.org

https://cp270.wordpress.com/2017/02/02/security-advisory-open-url-redirect-in-sme-server/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://forums.contribs.org/index.php/topic%2C52838.0.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.