Description
Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TasmoAdmin | TasmoAdmin | < 3.3.0 | 3.3.0 |
References
- https://github.com/TasmoAdmin/TasmoAdmin/pull/1039 patch
- https://cert.pl/en/posts/2024/01/CVE-2023-6552/ third-party-advisory
- https://cert.pl/posts/2024/01/CVE-2023-6552/ third-party-advisory