CVE-2007-0921 Open redirect in n/a

Critical 9.4 Published Updated

Remote attackers can redirect users to arbitrary websites via the top-level URI query string in Portal Search.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2007-0921?

CVE-2007-0921 is a critical vulnerability in n/a, published on 14 Feb 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI.

Which versions are affected by CVE-2007-0921?

It affects 1 product.

Products include Radical Technologies Portal Search.

How do I fix CVE-2007-0921?

No fix has been published for CVE-2007-0921 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-0921 being exploited?

There is no known exploitation of CVE-2007-0921 in the wild and no public exploit code.

Sources

Also known as GHSA-qqwm-cf3v-v53f.

Is CVE-2007-0921 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free