CVE-2018-17422
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 3.7%
exploitation probability
3.7%top 11% of all CVEs
observed exploitation
nono source reports it
dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter.
Affected products
n/a · n/a