CVE-2017-1000027

—

CVSS 3.0

6.1 medium

EPSS

1%p65

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.

Vendors: koozali
Products: sme server
Weakness: CWE-601
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.