CVE-2019-25282

Description

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect mechanism.

PUBLISHED Reserved 2026-01-06 | Published 2026-01-07 | Updated 2026-01-08 | Assigner VulnCheck

Problem types

URL Redirection to Untrusted Site ('Open Redirect')

Product status

Credits

LiquidWorm as Gjoko Krstic of Zero Science Lab finder

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5535.php (Zero Science Lab Vulnerability Advisory) third-party-advisory

packetstormsecurity.com/files/154628 (Packet Storm Security Exploit Entry) exploit

exchange.xforce.ibmcloud.com/vulnerabilities/167772 (IBM X-Force Vulnerability Exchange) vdb-entry

cxsecurity.com/issue/WLB-2019090193 (CXSecurity Vulnerability Database Entry) third-party-advisory

www.vsolcn.com/ (VSOL Vendor Homepage) product

cve.org (CVE-2019-25282)

nvd.nist.gov (CVE-2019-25282)

Download JSON