VulnerabilityModified
CVE-2014-2230
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2)…
MEDIUM 5.8EPSS 1.97%
Does this matter?
Lower severity and a low EPSS score (1.97%). Track it; it rarely justifies an emergency change on its own.
Description
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 1.97% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- openx/openx
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.htmlExploit
- http://seclists.org/fulldisclosure/2014/Oct/72Exploit
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621
- http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.htmlExploit
- http://seclists.org/fulldisclosure/2014/Oct/72Exploit
- http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97621
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.