CVE-2017-1000434 - Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));

Back Back to CVE browser

MEDIUM

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));

Published Jan 2, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 0.86%

Description

Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (3)

https://cjc.im/advisories/0008/
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1565
Advisory
https://wpvulndb.com/vulnerabilities/8992
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://cjc.im/advisories/0008/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-1565		Advisory
https://wpvulndb.com/vulnerabilities/8992		x_refsource_MISCThird Party Advisory