CVE-2020-36665CWE-601

Artesãos SEOTools TwitterCards.php eachValue redirect

Medium · published March 4, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function eachValue of the file TwitterCards.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The identifier of the patch is ca27cd0edf917e0bc805227013859b8b5a1f01fb. It is recommended to upgrade the affected component. The identifier VDB-222233 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00587 · 47.3th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2023-03-04T18:31Z
EPSS history
Timeline
  • 04 MAR 18:31Z
    Artesãos SEOTools TwitterCards.php eachValue redirect
    cvelistv5