CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.This issue affects Solid Security – Password, Two Factor Authentication, and Brute Force Protection: from n/a through 8.1.4.
Explanation of Vulnerability in Simple Terms
Solid Security versions up to 8.1.4 contain an open redirect vulnerability that allows an attacker to craft a malicious link redirecting users to an external website. The vulnerability requires high attack complexity but no authentication. While the integrity impact is low, this can be used in phishing attacks to trick users into visiting attacker-controlled sites.
What an attacker can do
Craft a malicious link that redirects users to an external website when clicked.
Potential impact on your site
Users could be redirected to phishing or malware sites, damaging trust in your site and potentially compromising user credentials.
Conditions required to exploit
Attacker must craft a specially designed URL; no authentication required. User must click the link.
Key dates
External resources
Related vulnerabilities
