CVE-2017-5474

CVE-2017-5474 describes an open redirect vulnerability in the comment.php component of Serendipity versions up to 2.0.5. This flaw allows remote attackers to redirect users to arbitrary external websites by manipulating the HTTP Referer header, facilitating phishing attacks. With a CVSS score of 6.1 (Medium), the vulnerability has a network attack vector and low attack complexity, requiring user interaction to be exploited, potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.