CVEvulnerability
CVE-2011-5252
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-20
Description
Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.
Affected configurations
• orchardproject orchard 1.0
• orchardproject orchard 1.0.20
• orchardproject orchard 1.1
• orchardproject orchard 1.1.30
• orchardproject orchard 1.2
• orchardproject orchard 1.2.41
• orchardproject orchard 1.3
• orchardproject orchard 1.3.9
• orchardproject orchard 1.3.10
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0023.html Exploit
- http://orchard.codeplex.com/discussions/283667 orchard.codeplex.com
- http://secunia.com/advisories/47398 Vendor Advisory
- http://www.mavitunasecurity.com/open-redirection-vulnerability-in-orchard/ Exploit
- http://www.securityfocus.com/bid/51260 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72110 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0023.html Exploit
- http://orchard.codeplex.com/discussions/283667 orchard.codeplex.com
- http://secunia.com/advisories/47398 Vendor Advisory
- http://www.mavitunasecurity.com/open-redirection-vulnerability-in-orchard/ Exploit
- http://www.securityfocus.com/bid/51260 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72110 exchange.xforce.ibmcloud.com