Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-569q-p62w-x28h

Опубликовано: 18 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL.

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL.

EPSS

Процентиль: 11%
0.00038
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-598

Связанные уязвимости

CVSS3: 4.2
nvd
12 месяцев назад

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL.

EPSS

Процентиль: 11%
0.00038
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-598