CVE-2023-36085

The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint

published October 24, 2023

CVSS
—
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.4th percentile
Published
2023-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint
    cvelistv5