CVE-2018-1000509

7.2 highEPSS 2.1%

High (7.2) in redirection redirection. EPSS 2.1% chance of exploitation in the next 30 days.

Redirection version 2.7.1 contains a Serialisation vulnerability possibly allowing ACE vulnerability in Settings page AJAX that can result in could allow admin to execute arbitrary code in some circumstances. This attack appear to be exploitable via Attacker must have access to admin account. This vulnerability appears to have been fixed in 2.8.

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2018-06-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redirection:redirection

References

https://advisories.dxw.com/advisories/unserialization-redirection/
https://advisories.dxw.com/advisories/unserialization-redirection/

Check your stack JSON