CVE-2023-5610

CWE-601 — Open Redirect3 documents3 sources
Severity
5.4MEDIUM
EPSS
0.1%
top 75.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unknown Seraphinite AcceleratorS-sols Seraphinite Accelerator
Timeline
PublishedNov 20

Description

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-hx6v-27f6-jgp7: The Seraphinite Accelerator WordPress plugin before 2↗2023-11-20
▶
CVEList
Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary Redirect↗2023-11-20
▶