CVE-2012-4824
published 2012-10-08CVE-2012-4824: Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to redirect users to…
PriorityP416medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
1.13%
62.6th percentile
Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectURL parameter.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | lotus_notes_traveler | <= 8.5.3.3 | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
| ibm | lotus_notes_traveler | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qx7w-4g5c-frh7: Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8
ghsa_unreviewed·2022-05-17·CVSS 5.8
CVE-2012-5307 [MEDIUM] CWE-79 GHSA-qx7w-4g5c-frh7: Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.
GHSA
GHSA-rj5q-vppv-3xrx: Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8
ghsa_unreviewed·2022-05-17
CVE-2012-4824 [MEDIUM] CWE-20 GHSA-rj5q-vppv-3xrx: Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8
Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirectURL parameter.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2012-10-08
Published