~ / search / GHSA-9hg5-7hwc-v434

GHSA-9hg5-7hwc-v434

Athenz vulnerable to Open Redirect

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-6035

Packages

EcosystemPackageAffectedFixed in
Maven com.yahoo.athenz:athenz < 1.8.25 1.8.25

Details

As written in the advisory (Markdown source, shown as plain text).

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page.

References

External links from the advisory. They lead to third-party sites.