CVE-2017-20164

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin of the file code/extensions/SecurityLoginExtension.php of the component Login. The manipulation of the argument URL leads to open redirect. It is possible to launch the attack remotely. Upgrading to version 6.0.3 is able to address this issue. The patch is identified as b065ebd82da53009d273aa7e989191f701485244. It is recommended to upgrade the affected component. VDB-217626 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Jan 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-201657.5A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/CVE-2017-201669.8Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.CVE-2017-201676.1A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipCVE-2017-201689.8A vulnerability was found in jfm-so piWallet. It has been rated as critical. Affected by this issue is some unknown functionality of the filCVE-2017-201699.8A vulnerability, which was classified as critical, has been found in GGGGGGGG ToN-MasterServer. Affected by this issue is some unknown functCVE-2017-201709.8A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/indeCVE-2017-201719.8A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtilsCVE-2017-201729.8A vulnerability was found in ridhoq soundslike. It has been classified as critical. Affected is the function get_song_relations of the file CVE-2017-201739.8A vulnerability was found in AlexRed contentmap. It has been rated as critical. Affected by this issue is the function Load of the file contCVE-2017-201749.8A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown CVE-2017-201756.1A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. This affects an uCVE-2017-201766.1A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the fil