CVE-2018-14381

Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.

• CWE-601

• https://github.com/pagekit/pagekit/issues/905Exploit, Third Party Advisory
• https://github.com/pagekit/pagekit/releases/tag/1.0.14Release Notes, Third Party Advisory
• https://github.com/pagekit/pagekit/issues/905Exploit, Third Party Advisory
• https://github.com/pagekit/pagekit/releases/tag/1.0.14Release Notes, Third Party Advisory

Published

Jul 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14374Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-14375Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-14378Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-14379MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly u…
• CVE-2018-1438IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtua…7.5
• CVE-2018-14380In Graylog before 2.4.6, XSS was possible in typeahead compo…
• CVE-2018-14382InstantCMS 2.10.1 has /redirect?url= XSS.
• CVE-2018-14383The Transition Technologies "The Scheduler" app 5.1.3 for Ji…
• CVE-2018-14384The Website Manager module in SEO Panel 3.13.0 and earlier i…4.8
• CVE-2018-14387An issue was discovered in WonderCMS before 2.5.2. An attack…
• CVE-2018-14388joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can…
• CVE-2018-14389joyplus-cms 1.6.0 has SQL Injection via the manager/admin_aj…