CVE-2022-23237 — Open Redirect in E-series Santricity OS Controller

CWE-601 — Open Redirect3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 58.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp E-series Santricity OS Controller
Timeline
PublishedJun 2
Latest updateJun 3

Description

E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xwfx-786r-2r6f: E-Series SANtricity OS Controller Software 11↗2022-06-03
▶
CVEList
CVE-2022-23237: E-Series SANtricity OS Controller Software 11↗2022-06-01
▶
CVE-2022-23237 — Open Redirect | cvebase