CVE-2014-7294 | BDVDB-2026-67102 Detail

Description#

Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/129756/Ex-Libris-Patron-Directory-Services-2.1-Open-Redirect.html
http://seclists.org/fulldisclosure/2014/Dec/127
http://tetraph.com/security/cves/cve-2014-7294-ex-libris-patron-directory-services-pds-open-redirect-security-vulnerability/

Exploit#

No public exploit known

History#

Version 12015-01-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.