CVE-2023-48003

An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' in the WebSocket messages.

• CWE-601

• https://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003Exploit, Third Party Advisory
• https://github.com/passtheticket/vulnerability-research/blob/main/aspnetzero_html_injection_via_websockets_messages.mdExploit, Third Party Advisory
• https://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003Exploit, Third Party Advisory
• https://github.com/passtheticket/vulnerability-research/blob/main/aspnetzero_html_injection_via_websockets_messages.mdExploit, Third Party Advisory

Published

Dec 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47993A Buffer out-of-bound read vulnerability in Exif.cpp::ReadIn…6.5
• CVE-2023-47994An integer overflow vulnerability in LoadPixelDataRLE4 funct…8.8
• CVE-2023-47995Memory Allocation with Excessive Size Value discovered in Bi…6.5
• CVE-2023-47996An integer overflow vulnerability in Exif.cpp::jpeg_read_exi…6.5
• CVE-2023-47997An issue discovered in BitmapAccess.cpp::FreeImage_AllocateB…6.5
• CVE-2023-4800The DoLogin Security WordPress plugin before 3.7.1 does not …6.5
• CVE-2023-4801An improper certification validation vulnerability in the In…7.5
• CVE-2023-48010STMicroelectronics SPC58 is vulnerable to Missing Protection…9.8
• CVE-2023-48011GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to con…7.8
• CVE-2023-48013GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to con…7.8
• CVE-2023-48014GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to con…7.8
• CVE-2023-48016Restaurant Table Booking System V1.0 is vulnerable to SQL In…7.5