PT-2023-12351 · Seeddms · Seeddms

Published 2023-07-20 · Updated 2023-07-31 · CVE-2021-39425

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.15

Description The issue allows an attacker to redirect users to arbitrary web URLs by tricking victims into clicking on crafted links. This is achieved through an open redirect vulnerability.

Recommendations For SeedDMS version 6.0.15, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-39425

Affected Products

Seeddms

References · 7

• 🔥 https://medium.com/@rohitgautam26/cve-2021-39425-8a336eba34dd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-39425 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39425 · Vendor Advisory
• https://medium.com/%40rohitgautam26/cve-2021-39425-8a336eba34dd · Note
• https://t.me/cvenotify/55575 · Telegram Post
• https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/11-Client_Side_Testing/04-Testing_for_Client_Side_URL_Redirect · Note
• https://t.me/cibsecurity/67056 · Telegram Post