Security Advisory

CVE-2007-2907

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-05-30 10:00:00
Last updated 2024-08-07 13:57:54
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.