Lucene search
HistoryJan 08, 2024 - 1:15 p.m.
CVE-2023-6552
open redirect
get parameter
language change
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
20.6%
Lack of “current” GET parameter validation during the action of changing a language leads to an open redirect vulnerability.
Affected configurations
Node
tasmoadmintasmoadminRange<3.3.0
Related
osv
osv
CVE-2023-6552
2024-01-08 13:15:09
cvelist
cvelist
CVE-2023-6552 Open redirect in TasmoAdmin
2024-01-08 12:19:58
prion
prion
Open redirect
2024-01-08 13:15:00
cve
cve
CVE-2023-6552
2024-01-08 13:15:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
20.6%
Related for NVD:CVE-2023-6552