CVE-2023-6552

Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cvd@cert.pl

Published

2024-01-08

Last modified

2025-04-17

Weaknesses

CWE-601

Affected products

• Tasmoadmin (Tasmoadmin)

References

• https://cert.pl/en/posts/2024/01/CVE-2023-6552/
• https://cert.pl/posts/2024/01/CVE-2023-6552/
• https://github.com/TasmoAdmin/TasmoAdmin/pull/1039