CVE-2017-18178

Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is…

published February 12, 2018

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02294 · 83.0th percentile
Published
2018-02-12T14:00Z
EPSS history
Timeline
  • 12 FEB 14:00Z
    Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is…
    cvelistv5