Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2024-55017

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Corezoid
Products
Corezoid
CVE-2024-27592

Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted link to /login/ in the login page URL.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Corezoid
Products
Corezoid