Home > Vulnerability Database > CVE-2011-5252

Mend Vulnerability Database

CVE-2011-5252

Good to know:

Date: January 11, 2013

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.

Language: C#

Severity Score

5.8

Related Resources (5)

Url: http://secunia.com/advisories/47398

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/72110

Url: http://orchard.codeplex.com/discussions/283667

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-5252

Url: https://www.mend.io/vulnerability-database/CVE-2011-5252

Severity Score

5.8

Weakness Type (CWE)

Input Validation

CWE-20

Top Fix

Upgrade Version

CVSS v2

Base Score:	5.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2011-5252

Good to know:

Date: January 11, 2013

Language: C#

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?