PT-2022-13364
CVE-2022-0692
·
تاريخ النشر
2022-02-21
·
تاريخ التحديث
2022-02-28
الوصف من
CVSS 2.0
5.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
rudloff/alltube versions prior to 3.0.1
Description
The issue allows an attacker to construct a URL that redirects to an arbitrary external domain. This is due to an open redirect vulnerability in releases prior to 3.0.1.
Recommendations
For versions prior to 3.0.1, update to version 3.0.1 to resolve the issue.
As a temporary workaround, consider restricting access to the vulnerable
rudloff/alltube module to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾