CVE-2023-27292: Medium severity opencats vulnerability
Published Feb 28, 2023
·Updated
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters.
Affected Software
1 affected component
OpenCATS OpenCATS=0.9.6
Event History
Feb 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-27292.
2
What is the title of this vulnerability?
The title of this vulnerability is 'An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters.'
3
What is the affected software for this vulnerability?
The affected software for this vulnerability is OpenCATS version 0.9.6.
4
What is the severity rating for this vulnerability?
The severity rating for this vulnerability is medium with a CVSS score of 5.4.
5
How can I fix this vulnerability?
To fix this vulnerability, ensure that user-supplied GET parameters are properly validated to prevent template injection and open redirect attacks.