CVE-2015-3898 | BDVDB-2026-97225 Detail

Description#

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirectUrl parameter to (1) bonita/login.jsp or (2) bonita/loginservice.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.html
http://www.securityfocus.com/archive/1/535733/100/0/threaded
https://www.htbridge.com/advisory/HTB23259

Exploit#

No public exploit known

History#

Version 12018-02-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.