The next parameter in the /accounts/login endpoint of...
Moderate severity
Unreviewed
Published
Dec 9, 2023
to the GitHub Advisory Database
•
Updated Dec 21, 2023
Description
Published by the National Vulnerability Database
Dec 9, 2023
Published to the GitHub Advisory Database
Dec 9, 2023
Last updated
Dec 21, 2023
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
References