GitHub_MCVELIST:CVE-2022-35953CVE-2022-35953 URL Redirection to Untrusted Site ('Open Redirect') in bookwyrm
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
30.3%
BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next. Some links in BookWyrm may be vulnerable to tabnabbing, a form of phishing that gives attackers an opportunity to redirect a user to a malicious site. The issue was patched in version 0.4.5.
CNA Affected
[
{
"product": "bookwyrm",
"vendor": "bookwyrm-social",
"versions": [
{
"status": "affected",
"version": "< 0.4.5"
}
]
}
]Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
30.3%