CVE-2023-50456

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-601
View all →

Vulnerability Description

An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name.

Related Vulnerabilities

CVE-2016-6636

MEDIUM
CVSS:5.3(Medium)

The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic...

CWE-6012016

CVE-2020-4849

MEDIUM
CVSS:5.3(Medium)

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vuln...

CWE-6012020

CVE-2021-3647

MEDIUM
CVSS:5.3(Medium)

URI.js is vulnerable to URL Redirection to Untrusted Site

CWE-6012021

CVE-2021-3664

MEDIUM
CVSS:5.3(Medium)

url-parse is vulnerable to URL Redirection to Untrusted Site

CWE-6012021

CVE-2022-0122

MEDIUM
CVSS:5.3(Medium)

forge is vulnerable to URL Redirection to Untrusted Site

CWE-6012022

CVE-2022-44560

MEDIUM
CVSS:5.3(Medium)

The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified.

CWE-6012022