VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026

CVE-2023-6380

CVE-2023-6380

Description

Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them to a malicious site and compromise them. Exploitation of this vulnerability is possible due to the fact that there is no proper sanitization of the 'URI' parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Alkacon/Opencms
    cpe:2.3:a:alkacon:opencms:*:*:*:*:*:*:*:*
    Range: >=14.0.0,<16.0.0
  • Open CMS/Mercuryllm-create
    Range: 14, 15
  • Alkacon/Open CMSv5
    Range: 14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.