CVE-2020-36912: fallo de gravedad media en Plexus anblick Digital Signage Management
Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.1epss 0.4%
Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Productos afectados
Plexus · Plexus anblick Digital Signage ManagementReferencias
https://exchange.xforce.ibmcloud.com/vulnerabilities/185521https://packetstormsecurity.com/files/158473https://www.plexus.es/https://www.vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameterhttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php