PT-2023-11832 · Unknown · Artesãos Seotools

Jnbn · Publicado 2023-03-04 · Atualizado 2024-05-17 · CVE-2020-36665

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Artesãos SEOTools versions up to 0.17.1

Description A critical issue affects the eachValue function of the TwitterCards.php file. The manipulation of the value argument leads to an open redirect.

Recommendations For Artesãos SEOTools versions up to 0.17.1, upgrade to version 0.17.2 to address this issue. As a temporary workaround, consider restricting the manipulation of the value argument in the eachValue function of the TwitterCards.php file until the upgrade is applied.

Exploit

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2020-36665

GHSA-W2X5-HPMG-J98H

Produtos afetados

Artesãos Seotools

Referências · 11

• 🔥 https://github.com/artesaos/seotools/pull/201 · Exploit
• https://github.com/artesaos/seotools/releases/tag/v0.17.2 · Correção
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fb · Correção
• https://github.com/artesaos/seotools · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36665 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-w2x5-hpmg-j98h · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2020-36665 · Aviso do Fabricante
• https://t.me/cvenotify/45520 · Publicação no Telegram
• https://t.me/cvenotify/60215 · Publicação no Telegram
• https://vuldb.com/?ctiid.222233 · Nota
• https://vuldb.com/?id.222233 · Nota