CVE-2020-17484

An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.

• CWE-601

• https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02Third Party Advisory, US Government Resource
• https://www.uffizio.com/Product
• https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02Third Party Advisory, US Government Resource
• https://www.uffizio.com/Product

Published

Dec 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17478ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not proper…7.5
• CVE-2020-17479jpv (aka Json Pattern Validator) before 2.2.2 does not prope…9.8
• CVE-2020-1748A flaw was found in all supported versions before wildfly-el…7.5
• CVE-2020-17480TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the …6.1
• CVE-2020-17482An issue has been found in PowerDNS Authoritative Server bef…4.3
• CVE-2020-17483An improper access control vulnerability exists in Uffizio's…7.5
• CVE-2020-17485A Remote Code Execution vulnerability exist in Uffizio's GPS…9.8
• CVE-2020-17487radare2 4.5.0 misparses signature information in PE files, c…7.5
• CVE-2020-17489An issue was discovered in certain configurations of GNOME g…4.3
• CVE-2020-1749A flaw was found in the Linux kernel's implementation of som…7.5
• CVE-2020-17490The TLS module within SaltStack Salt through 3002 creates ce…5.5
• CVE-2020-17494Untangle Firewall NG before 16.0 uses MD5 for passwords.5.3