Servers and applications
CVE-2017-5614
Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.
- Severity
- Medium 6.1
- Published
- 3 Mar 2017
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 11.54.0.36, 56.0.43, 58.0.43, 60.0.35
- Exploit chance
- 1.2% in the next 30 daysHigher than 68% of CVEs. EPSS by FIRST, 11 Nov 2026
- Weakness
- Open redirect (CWE-601)
- Attack
- Over the network · No login needed · Needs someone to click or open something
- Attacker can
- Read some data · Change some data
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
cPanel & WHMServers and applications · cpe:a:cpanel:cpanel |
|