CVE-2017-14523 Open redirect in n/a
WonderCMS allows HTTP Host header injection leading to open redirects, though exploitation is limited to local or self-attack scenarios.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14523?
CVE-2017-14523 is a high-severity vulnerability in n/a, published on 26 Jan 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely because the attack can only come from a local machine or from the administrator as a self attack
Weakness: CWE-74
Which versions are affected by CVE-2017-14523?
It affects 1 product.
Products include Wondercms Wondercms.
How do I fix CVE-2017-14523?
No fix has been published for CVE-2017-14523 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-14523 being exploited?
There is no known exploitation of CVE-2017-14523 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w8ch-p5g4-xj7g.