CVE-2023-28020

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published: Jul 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-280217.5The BigFix WebUI uses weak cipher suites.CVE-2023-280226.5HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are n CVE-2023-280236.5A cross site request forgery vulnerability in the BigFix WebUI Software Distribution interface site version 44 and before allows an NMO atta CVE-2023-280254.8Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a c CVE-2023-280266.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-280276.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-280286.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-280296.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-28036.1The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in CVE-2023-280306.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-280316.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-280326.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent