Zenvia 代码注入漏洞

Zenvia is a complete customer service software from Zenvia, Inc. A code injection vulnerability exists in Zenvia version 25.01.22 and prior versions, which stems from an incorrect manipulation of the parameter username that can lead to cross-site scripting attacks...

Zenvia 输入验证错误漏洞

Zenvia is a complete customer service software from Zenvia, Inc. An input validation error vulnerability exists in Zenvia version 25.01.22 and prior versions, which stems from the fact that incorrect manipulation of the parameter ReturnUrl can result in an open redirect...

PT-2025-4116 · Zenvia · Zenvia Movidesk

Name of the Vulnerable Software and Affected Versions: Zenvia Movidesk versions up to 25.01.22 Description: A vulnerability was found in Zenvia Movidesk, affecting an unknown functionality of the file /Account/Login. The manipulation of the ReturnUrl argument leads to open redirect. The attack ca...