CVE-2022-25799
Medium
Description
An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials.
SeverityMedium
CVSS6.1
Exploit probability—
ProductCert Vince
PublishedAug 16, 2022
First seenAug 16, 2022
Weakness typeCWE-601Open redirect
How to fix
Update
- cert vince1.50.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cert vince | v < 1.50.0 | 1.50.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.