CVE-2017-20119: TrueConf Server change-lang redirect
Published Jun 29, 2022
·Updated
A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirecturl leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
TrueConf Server<5.0.2
Event History
Jun 29, 2022
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-20119?
The severity of CVE-2017-20119 is medium with a severity value of 6.1.
2
How does CVE-2017-20119 affect TrueConf Server?
CVE-2017-20119 affects TrueConf Server version 4.3.7 up to version 5.0.2.
3
What is the vulnerability in TrueConf Server?
The vulnerability in TrueConf Server is an open redirect vulnerability.
4
Can CVE-2017-20119 be exploited remotely?
Yes, CVE-2017-20119 can be exploited remotely.
5
Is there a fix for CVE-2017-20119?
There is no known fix for CVE-2017-20119 at the moment.