URL Redirect Vulnerability in Zentao by ZenTao Inc.
CVE-2023-49394

6.1MEDIUM

Key Information:

Vendor

ZenTao Inc.

Status
Zentao
Vendor
CVE Published:
10 January 2024

What is CVE-2023-49394?

Zentao versions 4.1.3 and earlier exhibit a URL redirect vulnerability that hinders proper functionality of the system. Attackers could exploit this weakness to redirect users to unintended locations, potentially compromising sensitive data and user experience. Prompt updates and best security practices are vital to mitigate risks associated with this vulnerability.

References

https://narrow-payment-2cd.notion.site/zentao-4-1-3-is-vu...
https://gist.github.com/xue-yao-go/87d088fa3f423bba8098ef...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.