VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 10, 2021· Updated Jun 17, 2026

CVE-2020-13565

CVE-2020-13565

Description

An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and OpenEMR development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce). A specially crafted HTTP request can redirect users to an arbitrary URL. An attacker can provide a crafted URL to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Openemr/Openemr2 versions
    cpe:2.3:a:open-emr:openemr:5.0.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:open-emr:openemr:5.0.2:*:*:*:*:*:*:*
    • (no CPE)range: =5.0.2, development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce)
  • Phpgacl Project/Phpgacl
    cpe:2.3:a:phpgacl_project:phpgacl:3.3.7:*:*:*:*:*:*:*
  • OpenEMR/OpenEMRdescription
  • phpGACL/phpGACLllm-fuzzy
    Range: =3.3.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.