Lucene search

VulDBCVELIST:CVE-2022-3797

HistoryNov 01, 2022 - 12:00 a.m.

CVE-2022-3797 eolinker apinto-dashboard login redirect

2022-11-0100:00:00

CWE-601

VulDB

www.cve.org

eolinker apinto-dashboard

vulnerability

open redirect

remote attack

vdb-212633

cve-2022-3797

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

30.0%

JSON

A vulnerability was found in eolinker apinto-dashboard. It has been rated as problematic. This issue affects some unknown processing of the file /login. The manipulation of the argument callback leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212633 was assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "eolinker",
    "product": "apinto-dashboard",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

c2.im5i.com/2022/11/01/Xrny6.png

vuldb.com/?id.212633