mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
Update to VINCE version string incorrect
This commit is contained in:
parent
fa32f239b6
commit
bf447d7290
@ -1,7 +1,7 @@
|
||||
{
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "cert@cert.org",
|
||||
"DATE_PUBLIC": "2022-08-15T23:45:00.000Z",
|
||||
"DATE_PUBLIC": "2022-10-05T13:45:00.000Z",
|
||||
"ID": "CVE-2022-25799",
|
||||
"STATE": "PUBLIC",
|
||||
"TITLE": "An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0"
|
||||
@ -18,8 +18,8 @@
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "<",
|
||||
"version_name": "1.5.0",
|
||||
"version_value": "1.5.0"
|
||||
"version_name": "1.50.0",
|
||||
"version_value": "1.50.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -44,7 +44,7 @@
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.5.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials."
|
||||
"value": "An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials."
|
||||
}
|
||||
]
|
||||
},
|
||||
@ -77,4 +77,4 @@
|
||||
"source": {
|
||||
"discovery": "EXTERNAL"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user