Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Arno0X

#42851of 53,635
6.1Total CVSS
Vulnerabilities · 1
PT-2023-10349
6.1
2023-03-25
Unknown · Arno0X Twofactorauth · CVE-2016-15030
**Name of the Vulnerable Software and Affected Versions** Arno0x TwoFactorAuth (affected versions not specified) **Description** A problematic vulnerability has been found in Arno0x TwoFactorAuth, affecting an unknown part of the file login/login.php. The manipulation of the `from` argument leads to open redirect. It is possible to initiate the attack remotely. **Recommendations** To fix this issue, it is recommended to apply the patch named 8549ad3cf197095f783643e41333586d6a4d0e54. As a temporary workaround, consider restricting access to the vulnerable file login/login.php until the patch is applied. Avoid using the `from` argument in the affected API endpoint until the issue is resolved.