PT-2023-11830 · Unknown · Artesãos Seotools

Published 2023-03-04 · Updated 2024-05-17 · CVE-2020-36663

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Artesãos SEOTools versions up to 0.17.1

Description A problematic issue was found in Artesãos SEOTools, affecting the makeTag function of the file OpenGraph.php. The manipulation of the value argument leads to open redirect.

Recommendations For Artesãos SEOTools versions up to 0.17.1, upgrade to version 0.17.2 to address this issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-36663

GHSA-WJG8-PXQJ-C3C7

Affected Products

Artesãos Seotools

References · 11

• 🔥 https://github.com/artesaos/seotools/pull/201 · Exploit
• https://github.com/artesaos/seotools/releases/tag/v0.17.2 · Patch
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fb · Patch
• https://osv.dev/vulnerability/GHSA-wjg8-pxqj-c3c7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36663 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36663 · Vendor Advisory
• https://github.com/artesaos/seotools · Note
• https://vuldb.com/?id.222231 · Note
• https://t.me/cvenotify/45517 · Telegram Post
• https://t.me/cibsecurity/59423 · Telegram Post
• https://vuldb.com/?ctiid.222231 · Note