PT-2023-11832 · Unknown · Artesãos Seotools
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Artesãos SEOTools versions up to 0.17.1
Description
A critical issue affects the
eachValue function of the TwitterCards.php file. The manipulation of the value argument leads to an open redirect.Recommendations
For Artesãos SEOTools versions up to 0.17.1, upgrade to version 0.17.2 to address this issue. As a temporary workaround, consider restricting the manipulation of the
value argument in the eachValue function of the TwitterCards.php file until the upgrade is applied.Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Artesãos Seotools