CVE-2020-35560: Medium severity mbconnectline mymbconnect24 vulnerability
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated open redirect in the redirect.php.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35560?
CVE-2020-35560 is a vulnerability in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through version 2.6.2 that allows for an unauthenticated open redirect in the redirect.php file.
How severe is CVE-2020-35560?
CVE-2020-35560 has a severity rating of 6.1 (medium).
How can I exploit CVE-2020-35560?
As a user, you cannot exploit CVE-2020-35560 directly. It is a vulnerability that can be exploited by attackers to perform an unauthenticated open redirect.
How do I fix CVE-2020-35560?
To fix CVE-2020-35560, update MB CONNECT LINE mymbCONNECT24 or mbCONNECT24 to version 2.6.3 or later.
Where can I find more information about CVE-2020-35560?
You can find more information about CVE-2020-35560 at the following references: [VDE Advisory](https://cert.vde.com/de-de/advisories/vde-2021-003) and [MB CONNECT LINE Security Advice](https://mbconnectline.com/security-advice/).