VULNERABILITY INTELLIGENCE
CVE-2021-43058
CVSS score6.1 MEDIUM
EPSS probability0.58%
CISA KEVNot currently listed
Published2021-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site.
Weakness classification
- nvd@nist.gov: CWE-601
Primary references
- security@replicated.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory