PT-2023-11832 · Unknown · Artesãos Seotools

Jnbn · Published 2023-03-04 · Updated 2024-05-17 · CVE-2020-36665

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Artesãos SEOTools versions up to 0.17.1

Description A critical issue affects the eachValue function of the TwitterCards.php file. The manipulation of the value argument leads to an open redirect.

Recommendations For Artesãos SEOTools versions up to 0.17.1, upgrade to version 0.17.2 to address this issue. As a temporary workaround, consider restricting the manipulation of the value argument in the eachValue function of the TwitterCards.php file until the upgrade is applied.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-36665

GHSA-W2X5-HPMG-J98H

Affected Products

Artesãos Seotools

References · 11

• 🔥 https://github.com/artesaos/seotools/pull/201 · Exploit
• https://github.com/artesaos/seotools/releases/tag/v0.17.2 · Patch
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-36665 · Security Note
• https://osv.dev/vulnerability/GHSA-w2x5-hpmg-j98h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-36665 · Vendor Advisory
• https://github.com/artesaos/seotools · Note
• https://t.me/cvenotify/45520 · Telegram Post
• https://t.me/cvenotify/60215 · Telegram Post
• https://vuldb.com/?ctiid.222233 · Note
• https://vuldb.com/?id.222233 · Note