CVE-2022-4589

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Affected by this vulnerability is the function returnTo of the file termsandconditions/views.py. The manipulation leads to open redirect. The attack can be launched remotely. Upgrading to version 2.0.10 is able to address this issue. The name of the patch is 03396a1c2e0af95e12a45c5faef7e47a4b513e1a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216175.

• CWE-601

• https://github.com/cyface/django-termsandconditions/commit/03396a1c2e0af95e12a45c5faef7e47a4b513e1aPatch, Third Party Advisory
• https://github.com/cyface/django-termsandconditions/pull/239Patch, Third Party Advisory
• https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.10Patch, Third Party Advisory
• https://vuldb.com/?id.216175Permissions Required, Third Party Advisory
• https://github.com/cyface/django-termsandconditions/commit/03396a1c2e0af95e12a45c5faef7e47a4b513e1aPatch, Third Party Advisory
• https://github.com/cyface/django-termsandconditions/pull/239Patch, Third Party Advisory
• https://github.com/cyface/django-termsandconditions/releases/tag/v2.0.10Patch, Third Party Advisory
• https://vuldb.com/?id.216175Permissions Required, Third Party Advisory

Published

Dec 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45884An issue was discovered in the Linux kernel through 6.0.9. d…7
• CVE-2022-45885An issue was discovered in the Linux kernel through 6.0.9. d…7
• CVE-2022-45886An issue was discovered in the Linux kernel through 6.0.9. d…7
• CVE-2022-45887An issue was discovered in the Linux kernel through 6.0.9. d…4.7
• CVE-2022-45888An issue was discovered in the Linux kernel through 6.0.9. d…6.4
• CVE-2022-45889Planet eStream before 6.72.10.07 allows a remote attacker (w…7.2
• CVE-2022-45890In Planet eStream before 6.72.10.07, a Reflected Cross-Site …6.1
• CVE-2022-45891Planet eStream before 6.72.10.07 allows attackers to call re…9.1
• CVE-2022-45892In Planet eStream before 6.72.10.07, multiple Stored Cross-S…5.4
• CVE-2022-45893Planet eStream before 6.72.10.07 allows a low-privileged use…8.8
• CVE-2022-45894GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ …6.5
• CVE-2022-45895Planet eStream before 6.72.10.07 discloses sensitive informa…6.5