CVE-2023-28799
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this param
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.
HIGH · CVSS 8.2
EPSS 0.00149
Schedule remediation
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0