Medium severity6.1OSV Advisory· Published Jan 14, 2017· Updated Jun 17, 2026

CVE-2017-5474

Description

Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

S9y/SerendipityOSV
Range: 2.0.0, 2.0.1, 2.0.2, …
Serendipity/Serendipityllm-fuzzy
Range: <=2.0.5

Patches

Vulnerability mechanics

References

github.com/s9y/Serendipity/commit/6285933470bab2923e4573b5d54ba9a32629b0cdnvdIssue TrackingPatch
www.securityfocus.com/bid/95652nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000