CVE-2015-10052 : ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problem

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the function bearbeiten/login. The manipulation leads to open redirect. It is possible to initiate the attack remotely. The patch is named 88a517dc19443081210c804b655e72770727540d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218379. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Published 2023-01-15 19:15:09

Updated 2024-08-06 09:15:30

Source VulDB

View at NVD, CVE.org

Vulnerability category: Open redirect

Products affected by CVE-2015-10052

Gibb-modul-151 Project » Gibb-modul-151
Versions before (<) 2015-03-19
cpe:2.3:a:gibb-modul-151_project:gibb-modul-151:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-10052

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-10052

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:P	8.0	4.9	VulDB
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial
4.6	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L	2.1	2.5	VulDB
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: Low Availability: Low
4.6	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L	2.1	2.5	VulDB	2024-02-29
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: Low Availability: Low
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2015-10052

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

Assigned by: cna@vuldb.com (Primary)

References for CVE-2015-10052

https://vuldb.com/?ctiid.218379

Permissions Required;Third Party Advisory
https://github.com/calesanz/gibb-modul-151/commit/88a517dc19443081210c804b655e72770727540d

fixed security vulnerability in redirect (missing validation) · calesanz/gibb-modul-151@88a517d · GitHub
Patch;Third Party Advisory
https://vuldb.com/?id.218379

Third Party Advisory

Jump to

Vulnerability Details : CVE-2015-10052

Products affected by CVE-2015-10052

Exploit prediction scoring system (EPSS) score for CVE-2015-10052

CVSS scores for CVE-2015-10052

CWE ids for CVE-2015-10052

References for CVE-2015-10052