CVE-2014-7294

CVE-2014-7294 describes an open redirect vulnerability in the logon page of NYU OpenSSO Integration 2.1 and earlier, specifically impacting Ex Libris Patron Directory Services (PDS). An attacker could exploit this by manipulating the 'url' parameter to redirect users to arbitrary malicious websites, facilitating phishing attacks. The vulnerability has a CVSS score of 5.8, indicating a medium severity. It requires medium attack complexity (AC:M) and no authentication (Au:N), with potential impacts on confidentiality and integrity (C:P/I:P). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion or media coverage, suggesting low public awareness and a lack of widespread attention.