{"id":"GHSA-v47j-rw9h-6m47","aliases":["CVE-2018-14381"],"title":"Pagekit open redirect vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Pagekit before 1.0.14 has a `/user/login?redirect=` open redirect vulnerability.","severity":"medium","score":6.1,"published":"2022-05-14T02:59:33.000Z","modified":"2024-04-24T20:43:07.807Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"pagekit/pagekit","sources":[{"name":"OSV · GHSA-v47j-rw9h-6m47","url":"https://osv.dev/vulnerability/GHSA-v47j-rw9h-6m47"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.14"}],"type":"ECOSYSTEM"}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.11.0","0.11.1","0.11.2","0.11.3","0.8.8","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","1.0.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9"],"fixed":["1.0.14"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2018-14381","https://github.com/pagekit/pagekit/issues/905","https://github.com/pagekit/pagekit","https://github.com/pagekit/pagekit/releases/tag/1.0.14"],"sources":[{"name":"OSV","id":"GHSA-v47j-rw9h-6m47","modified":"2024-04-24T20:43:07.807631Z","url":"https://osv.dev/vulnerability/GHSA-v47j-rw9h-6m47"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T23:50:31.598Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}