CVE-2022-27461: Medium severity Nopcommerce NopCommerce vulnerability
Published May 4, 2022
·Updated
In nopCommerce 4.50.1, an open redirect vulnerability can be triggered by luring a user to authenticate to a nopCommerce page by clicking on a crafted link.
Affected Software
1 affected component
Nopcommerce NopCommerce<=4.50.1
Event History
May 4, 2022
CVE Published
via MITRE·02:04 PM
Data Sourced
via MITRE·02:04 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-27461?
The severity of CVE-2022-27461 is medium with a CVSS score of 6.1.
2
How can an open redirect vulnerability be triggered in nopCommerce 4.50.1?
An open redirect vulnerability can be triggered in nopCommerce 4.50.1 by luring a user to authenticate to a nopCommerce page using a crafted link.
3
What is the affected software version of CVE-2022-27461?
The affected software version of CVE-2022-27461 is nopCommerce 4.50.1.
4
Are there any references available for CVE-2022-27461?
Yes, you can find references for CVE-2022-27461 at the following links: http://nopcommerce.com, https://tf1t.gitbook.io/mycve/nopcommerce/open-redirect-on-nopcommerce-4.50.1
5
What is the CWE category associated with CVE-2022-27461?
The CWE category associated with CVE-2022-27461 is CWE-601 - URL Redirection to Untrusted Site ('Open Redirect').