Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-601,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| koozali | sme_server | 9.2 |
| koozali | sme_server | 10.0 |
| koozali | sme_server | 9.0 |
| koozali | sme_server | 8.0 |