PT-2024-38994
CVE-2024-8412
·
تاريخ النشر
2024-09-04
·
تاريخ التحديث
2024-09-12
الوصف من
CVSS 4.0
5.3
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
LinuxOSsk Shakal-NG versions up to 1.3.3
Description:
A problematic issue was found in LinuxOSsk Shakal-NG, affecting an unknown function of the file comments/views.py. The manipulation of the
next argument leads to open redirect. It is possible to launch the attack remotely.Recommendations:
For LinuxOSsk Shakal-NG versions up to 1.3.3, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the
comments/views.py file until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾