CVE-2018-1000509

Published: Jun 26, 2018Modified: Nov 21, 2024

7.2

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances. This attack appear to be exploitable via Attacker must have access to admin account. This vulnerability appears to have been fixed in 2.8.

Affected (1)

Products: Redirection: Redirection

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redirection Redirection	Version 2.7.1

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://advisories.dxw.com/advisories/unserialization-redirection/

Source: cve@mitre.org

ExploitThird Party Advisory

https://advisories.dxw.com/advisories/unserialization-redirection/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.