CVE-2011-5252

medium

Description

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/72110

https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-5151

http://www.securityfocus.com/bid/51260

http://www.mavitunasecurity.com/open-redirection-vulnerability-in-orchard/

http://secunia.com/advisories/47398

http://orchard.codeplex.com/discussions/283667

http://archives.neohapsis.com/archives/bugtraq/2012-01/0023.html

Details

Source: Mitre, NVD

Published: 2013-01-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.11927