CVE-2019-11016 - Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect

MEDIUM

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect

Published Apr 8, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.19%

Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://elgg.org/blog/view/2913744/security-release-elgg-11218-and-2311		x_refsource_MISCRelease NotesVendor Advisory
https://github.com/Elgg/Elgg/releases/tag/1.12.18		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/Elgg/Elgg/releases/tag/2.3.11		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/advisories/GHSA-r6h7-846c-8m78		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-11016