Skip to content
OpenAdvisories
Low · 3.5 CVE-2017-20119 EUVD-2017-11126GHSA-fx47-prh9-mj6x

TrueConf Server change-lang redirect

Published Jun 29, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
TrueConf Server 4.3.7 —

References