Tapatalk for WoltLab Burning Board CVE-2014-8870 Arbitrary URI Redirection Vulnerability
BID:71998
Info
Tapatalk for WoltLab Burning Board CVE-2014-8870 Arbitrary URI Redirection Vulnerability
| Bugtraq ID: | 71998 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-8870 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 12 2015 12:00AM |
| Updated: | Jan 12 2015 12:00AM |
| Credit: | RedTeam Pentesting GmbH |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Tapatalk for WoltLab Burning Board CVE-2014-8870 Arbitrary URI Redirection Vulnerability
Tapatalk for WoltLab Burning Board is prone to an arbitrary URI-redirection vulnerability because it fails to properly sanitize user-supplied input.
Successful exploits may redirect a user to a potentially malicious site, which may aid in phishing attacks.
Tapatalk for WoltLab Burning Board is prone to an arbitrary URI-redirection vulnerability because it fails to properly sanitize user-supplied input.
Successful exploits may redirect a user to a potentially malicious site, which may aid in phishing attacks.
Exploit / POC
Tapatalk for WoltLab Burning Board CVE-2014-8870 Arbitrary URI Redirection Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Tapatalk for WoltLab Burning Board CVE-2014-8870 Arbitrary URI Redirection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.