{"api_version":"1","generated_at":"2026-07-23T09:31:20+00:00","cve":"CVE-2017-5614","urls":{"html":"https://cve.report/CVE-2017-5614","api":"https://cve.report/api/cve/CVE-2017-5614.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-5614","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5614"},"summary":{"title":"CVE-2017-5614","description":"Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2017-03-03 15:59:00","updated_at":"2019-10-31 02:45:00"},"problem_types":["CWE-601"],"metrics":[],"references":[{"url":"http://www.securityfocus.com/bid/95870","name":"95870","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"cgiemail and cgiecho Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.openwall.com/lists/oss-security/2017/01/28/8","name":"[oss-security] 20170128 Re: CVE request: cgiemail multiple vulnerabilities","refsource":"MLIST","tags":["Mailing List"],"title":"oss-security - Re: CVE request: cgiemail multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://news.cpanel.com/tsr-2017-0001-full-disclosure/","name":"https://news.cpanel.com/tsr-2017-0001-full-disclosure/","refsource":"MISC","tags":["Vendor Advisory"],"title":"TSR-2017-0001 Full Disclosure | cPanel Newsroom","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5614","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5614","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"5614","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cpanel","cpe5":"cpanel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"5614","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cpanel","cpe5":"cpanel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2017-5614","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"95870","refsource":"BID","url":"http://www.securityfocus.com/bid/95870"},{"name":"https://news.cpanel.com/tsr-2017-0001-full-disclosure/","refsource":"MISC","url":"https://news.cpanel.com/tsr-2017-0001-full-disclosure/"},{"name":"[oss-security] 20170128 Re: CVE request: cgiemail multiple vulnerabilities","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2017/01/28/8"}]}},"nvd":{"publishedDate":"2017-03-03 15:59:00","lastModifiedDate":"2019-10-31 02:45:00","problem_types":["CWE-601"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","versionStartIncluding":"55.9999.61","versionEndExcluding":"56.0.43","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","versionStartIncluding":"57.9999.48","versionEndExcluding":"58.0.43","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","versionStartIncluding":"11.54.0.0","versionEndExcluding":"11.54.0.36","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*","versionStartIncluding":"59.9999.58","versionEndExcluding":"60.0.35","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"5614","Ordinal":"102175","Title":"CVE-2017-5614","CVE":"CVE-2017-5614","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"5614","Ordinal":"1","NoteData":"Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.","Type":"Description","Title":null},{"CveYear":"2017","CveId":"5614","Ordinal":"2","NoteData":"2017-03-03","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"5614","Ordinal":"3","NoteData":"2017-03-06","Type":"Other","Title":"Modified"}]}}}