CVE-2022-4589CWE-601

cyface Terms and Conditions Module views.py returnTo redirect

Medium · published December 17, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 2.0.10 is able to address this issue. The name of the patch is 03396a1c2e0af95e12a45c5faef7e47a4b513e1a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216175.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-12-17T00:00Z
EPSS history
Timeline
  • 17 DEC 00:00Z
    cyface Terms and Conditions Module views.py returnTo redirect
    cvelistv5