CVE-2025-40545: Observability Self-hosted: açık yönlendirme

Açıklama (NVD)

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

Özet bilgiler

Ürün

Solarwinds Observability Self-hosted

CVSS v3.1

4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

%0,26 (yüzdelik 18)

CWE

CWE-601

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• documentation.solarwinds.com
• www.solarwinds.com
• CWE-601