What is CVE-2015-7823?

CVE-2015-7823 is a vulnerability in Kentico Cms. Published 2015-10-21.

Is CVE-2015-7823 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Kentico Cms

CVE-2015-7823

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter.

EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.

Affected products

Kentico Kentico_cms — versions 8.2
N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/cve-scores
ARPSyndicate/kenzer-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-7823?: CVE-2015-7823 is a vulnerability in Kentico Cms. Published 2015-10-21.
Is CVE-2015-7823 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.