CVE-2014-2230: Medium severity open edx vulnerability
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) maxdest parameter to ck.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2230?
CVE-2014-2230 is considered a high severity vulnerability due to its potential to facilitate phishing attacks.
How do I fix CVE-2014-2230?
To fix CVE-2014-2230, upgrade to OpenX version 2.8.11 or later to mitigate the open redirect vulnerability.
What types of attacks can CVE-2014-2230 enable?
CVE-2014-2230 can be exploited to conduct phishing attacks by redirecting users to arbitrary malicious websites.
Which versions of OpenX are affected by CVE-2014-2230?
OpenX versions 2.8.10 and earlier are affected by CVE-2014-2230.
Is CVE-2014-2230 a client-side or server-side vulnerability?
CVE-2014-2230 is a server-side vulnerability that allows attackers to influence the behavior of the web application.