CVE-2017-5614

—

CVSS 3.1

6.1 medium

EPSS

1%p67

Published

Mar 3, 2017 (Mar 3, 2017)

Modified

Jun 17, 2026

Description

Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.

Vendors: cpanel
Products: cpanel
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.