CVE-2023-34916

Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java.

• CWE-601

• https://github.com/fuge/cms/issues/4Exploit, Issue Tracking, Vendor Advisory
• https://payatu.com/advisory/unvalidated-open-redirection-fuge-cms-v1-0/Third Party Advisory
• https://github.com/fuge/cms/issues/4Exploit, Issue Tracking, Vendor Advisory
• https://payatu.com/advisory/unvalidated-open-redirection-fuge-cms-v1-0/Third Party Advisory

Published

Jul 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34878An issue was discovered in Ujcms v6.0.2 allows attackers to …7.5
• CVE-2023-3488Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3…5.5
• CVE-2023-34880cmseasy v7.7.7.7 20230520 was discovered to contain a path t…9.8
• CVE-2023-3489The firmwaredownload command on Brocade Fabric OS v9.2.0 co…7.5
• CVE-2023-3490 SQL Injection in GitHub repository fossbilling/fossbilling …9.8
• CVE-2023-3491Unrestricted Upload of File with Dangerous Type in GitHub re…8.8
• CVE-2023-34917Fuge CMS v1.0 contains an Open Redirect vulnerability in mem…6.1
• CVE-2023-3492The WP Shopping Pages WordPress plugin through 1.14 does not…6.8
• CVE-2023-34923XML Signature Wrapping (XSW) in SAML-based Single Sign-on fe…8.1
• CVE-2023-34924H3C Magic B1STW B1STV100R012 was discovered to contain a sta…7.5
• CVE-2023-34927Casdoor v1.331.0 and below was discovered to contain a Cross…6.5
• CVE-2023-34928A stack overflow in the Edit_BasicSSID function of H3C Magic…7.5