Description

Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Remediation

References

CVE-2013-7079

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2017-7189)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23599)

Jboss EAP Inadequate Encryption Strength Vulnerability (CVE-2019-14887)

SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17784)

Apache HTTP Server Numeric Errors Vulnerability (CVE-2006-3747)

Severity

Medium

Classification

CVE-2013-7079 CWE-20

Tags

Missing Update Known Vulnerabilities