CVE-2020-26219
Last modified
CVE-2020-26219 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. EPSS estimates a 0.61% chance of exploitation in the next 30 days.
Description
touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it can be severe should it be exploitable. The issue is fixed in version 2.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Touchbase.Ai Project | Touchbase.Ai | < 2.0 |
References
- https://github.com/puncsky/touchbase.ai/security/advisories/GHSA-6wcq-7r33-gw8xThird Party Advisory
- https://github.com/puncsky/touchbase.ai/security/advisories/GHSA-6wcq-7r33-gw8xThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-26219?
How severe is CVE-2020-26219?
How do I fix CVE-2020-26219?
Are you affected by CVE-2020-26219?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST