CVE-2014-2230

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-10-23 · updated 2026-06-17

Description

Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.

Affected products

Openx: through 2.8.10; 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5 (+4)

References

http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html
http://seclists.org/fulldisclosure/2014/Oct/72
http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
https://exchange.xforce.ibmcloud.com/vulnerabilities/97621
http://packetstormsecurity.com/files/128718/OpenX-2.8.10-Open-Redirect.html
http://seclists.org/fulldisclosure/2014/Oct/72
http://www.tetraph.com/blog/cves/cve-2014-2230-openx-open-redirect-vulnerability-2
https://exchange.xforce.ibmcloud.com/vulnerabilities/97621

Get alerted when CVE-2014-2230 or the next vulnerability affects your stack