Reverse Tabnabbing and Open Redirect Vulnerability (CVE-2021-3109)

Security Advisory Summary

The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account.

Affected Products

  • Orion Platform versions 2020.2.4 and earlier

Fixed Software Release

Acknowledgments

  • Jhon Jaro
Advisory Details
Severity
Medium
Advisory ID
First Published
03/25/2021
Version

Orion Platform 2020.2.5

CVSS Score
Download PDF
Send an Email