CVE-2020-23182: Medium severity jenkins vulnerability
Published Jul 2, 2021
·Updated
The component /php-fusion/infusions/shoutboxpanel/shoutboxarchive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel.
Affected Software
1 affected component
PHP-Fusion php-fusion=9.03.60
Event History
Jul 2, 2021
CVE Published
via MITRE·05:51 PM
Data Sourced
via MITRE·05:51 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-23182.
2
What is the severity of CVE-2020-23182?
The severity of CVE-2020-23182 is medium with a CVSS score of 5.4.
3
What is the affected software version of CVE-2020-23182?
The affected software version of CVE-2020-23182 is PHP-Fusion 9.03.60.
4
What is the CWE ID for CVE-2020-23182?
The CWE ID for CVE-2020-23182 is CWE-601.
5
How can this vulnerability be fixed?
To fix this vulnerability, update PHP-Fusion to a version that is not affected by the vulnerability.