CVE-2018-8937

MEDIUM · CVSS 6.1 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-03-26 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-8937

Severity

MEDIUM

CVSS

6.1

EPSS

0.69%

Java

Original Filing — NVD Description

An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code.