Lucene search

GoogleOSV:CVE-2023-41609

HistorySep 11, 2023 - 6:15 p.m.

CVE-2023-41609

2023-09-1118:15:10

Google

osv.dev

open redirect

couchcms

vulnerability

sanitize url

arbitrary website

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.

CPENameOperatorVersion
couchcmseq1.4.5
couchcmseq1.3.5
couchcmseq2.1
couchcmseq1.4.7
couchcmseq2.2
couchcmseq2.0
couchcmseq2.3
couchcmseq1.4.5RC1
couchcmseq1.4.5RC2
couchcmseq2.2.1

Name	Operator	Version
couchcms	eq	1.4.5
couchcms	eq	1.3.5
couchcms	eq	2.1
couchcms	eq	1.4.7
couchcms	eq	2.2
couchcms	eq	2.0
couchcms	eq	2.3
couchcms	eq	1.4.5RC1
couchcms	eq	1.4.5RC2
couchcms	eq	2.2.1

Rows per page:

1-10 of 111

References

github.com/CouchCMS/CouchCMS/issues/190

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for OSV:CVE-2023-41609