VULNERABILITY INTELLIGENCE

CVE-2017-5614

CVSS score6.1 MEDIUM
EPSS probability1.21%
CISA KEVNot currently listed
Published2017-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.

Weakness classification

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references