Lucene search
HistoryJan 10, 2024 - 9:15 a.m.
CVE-2023-49394
zentao
version 4.1.3
url redirect
vulnerability
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly.
Affected configurations
Node
easycorpzentaoRange≤4.1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| easycorp:zentao | easycorp zentao | le | 4.1.3 |
Related
nvd
nvd
CVE-2023-49394
2024-01-10 09:15:44
prion
prion
Design/Logic Flaw
2024-01-10 09:15:00
cvelist
cvelist
CVE-2023-49394
2024-01-10 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for CVE-2023-49394