CVE-2023-6552 Open redirect in TasmoAdmin

2024-01-0812:19:58

CWE-601

CERT-PL

www.cve.org

open redirect

tasmoadmin

lack of validation

0.001 Low

EPSS

Percentile

20.6%

JSON

Lack of “current” GET parameter validation during the action of changing a language leads to an open redirect vulnerability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "TasmoAdmin",
    "repo": "https://github.com/TasmoAdmin/TasmoAdmin",
    "vendor": "TasmoAdmin",
    "versions": [
      {
        "lessThan": "3.3.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]