PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL.
References
| Link | Resource |
|---|---|
| https://github.com/AetherBlack/CVE/tree/main/PMB | Exploit |
| https://github.com/AetherBlack/CVE/tree/main/PMB | Exploit |
Configurations
History
21 Nov 2024, 07:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/AetherBlack/CVE/tree/main/PMB - Exploit |
18 Jan 2024, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sigb:pmb:7.4.6:*:*:*:*:*:*:* |
13 Mar 2023, 15:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/AetherBlack/CVE/tree/main/PMB - Exploit | |
| CPE | cpe:2.3:a:pmb_project:pmb:7.4.6:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CWE | CWE-601 |
07 Mar 2023, 13:54
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-06 21:15
Updated : 2024-11-21 07:48
NVD link : CVE-2023-24735
Mitre link : CVE-2023-24735
CVE.ORG link : CVE-2023-24735
JSON object : View
Products Affected
sigb
- pmb
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')