CVE-2023-50704

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate phishing attacks against application users.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Dec 20, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-507055.3An attacker could create malicious requests to obtain sensitive information about the web server.CVE-2023-507064.3A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and exCVE-2023-507077.5Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the devicCVE-2023-507089.8yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. In yii2-authclient pCVE-2023-507097.5Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable byCVE-2023-50715.4The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sitekit_iframe' shortcode in versions up to, and includinCVE-2023-507104.3Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values from previous requeCVE-2023-507119.8vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 CVE-2023-507125.4Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-SiteCVE-2023-507135.0Speckle Server provides server, frontend, 3D viewer, and other JavaScript utilities for the Speckle 3D data platform. A vulnerability in verCVE-2023-507148.8yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. In yii2-authclient pCVE-2023-507154.3Home Assistant is open source home automation software. Prior to version 2023.12.3, the login page discloses all active user accounts to any
CVE-2023-50704: Medium severity, CVSS 6.1 | Vulnix