CVE-2017-5614
Publication date 3 March 2017
Last updated 25 August 2025
Ubuntu priority
Description
Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure parameter.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| cgiemail | ||
| 16.04 LTS xenial |
Fixed 1.6-37+deb7u1build0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 1.6-37+deb7u1build0.14.04.1
|
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
6.1 · Medium
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N