CVE-2022-27463: URL Redirection to Untrusted Site ('Open Redirect')

April 6, 2022 (updated April 12, 2022)

Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page.

References

github.com/WWBN/AVideo/commit/77e9aa6411ff4b97571eb82e587139ec05ff894c
github.com/advisories/GHSA-34hv-f45p-4qfq
nvd.nist.gov/vuln/detail/CVE-2022-27463

Code Behaviors & Features

Detect and mitigate CVE-2022-27463 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →