Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-0122
HistoryJan 06, 2022 - 5:00 a.m.

CVE-2022-0122 Open Redirect in digitalbazaar/forge

2022-01-0605:00:12
CWE-601
@huntrdev
www.cve.org
2
cve-2022-0122
open redirect
digitalbazaar/forge
url redirection
untrusted site

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

33.4%

forge is vulnerable to URL Redirection to Untrusted Site

CNA Affected

[
  {
    "product": "digitalbazaar/forge",
    "vendor": "digitalbazaar",
    "versions": [
      {
        "lessThan": "1.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

33.4%

Related for CVELIST:CVE-2022-0122