PT-2022-27668 · Cyface · Cyface Terms/Conditions Module
CVSS v3.1
5.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
cyface Terms and Conditions Module versions prior to 2.0.11
Description
A vulnerability has been found in the cyface Terms and Conditions Module, classified as problematic. The issue affects the
returnTo function of the file termsandconditions/views.py, leading to an open redirect. This manipulation can be launched remotely.Recommendations
To address this issue, upgrade to version 2.0.11. As a temporary workaround, consider restricting access to the
returnTo function of the termsandconditions/views.py file until the upgrade is applied.Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cyface Terms/Conditions Module