PT-2023-11831 · Unknown · Artesãos Seotools

Published 2023-03-04 · Updated 2024-05-17 · CVE-2020-36664

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Artesãos SEOTools versions up to 0.17.1

Description A vulnerability has been found in the function setTitle of the file SEOMeta.php. The manipulation of the argument title leads to open redirect.

Recommendations For Artesãos SEOTools versions up to 0.17.1, upgrade to version 0.17.2 to address this issue. As a temporary workaround, consider restricting the manipulation of the title argument in the setTitle function until the upgrade is applied.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-36664

GHSA-W745-XJQX-7WP8

Affected Products

Artesãos Seotools

References · 10

• 🔥 https://github.com/artesaos/seotools/pull/201 · Exploit
• https://github.com/artesaos/seotools/releases/tag/v0.17.2 · Patch
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-36664 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36664 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w745-xjqx-7wp8 · Vendor Advisory
• https://github.com/artesaos/seotools · Note
• https://t.me/cvenotify/45519 · Telegram Post
• https://vuldb.com/?id.222232 · Note
• https://vuldb.com/?ctiid.222232 · Note