Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7cpm-g584-hg8j

Опубликовано: 30 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts.

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts.

EPSS

Процентиль: 21%
0.00069
Низкий

7.5 High

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 7.5
nvd
4 месяца назад

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts.

EPSS

Процентиль: 21%
0.00069
Низкий

7.5 High

CVSS3

Дефекты

CWE-601