Update to VINCE version string incorrect

This commit is contained in:
Vijay Sarvepalli 2022-10-05 14:22:19 -04:00
parent fa32f239b6
commit bf447d7290
No known key found for this signature in database
GPG Key ID: D0AACCEB7E72F371

View File

@ -1,7 +1,7 @@
{
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"DATE_PUBLIC": "2022-08-15T23:45:00.000Z",
"DATE_PUBLIC": "2022-10-05T13:45:00.000Z",
"ID": "CVE-2022-25799",
"STATE": "PUBLIC",
"TITLE": "An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0"
@ -18,8 +18,8 @@
"version_data": [
{
"version_affected": "<",
"version_name": "1.5.0",
"version_value": "1.5.0"
"version_name": "1.50.0",
"version_value": "1.50.0"
}
]
}
@ -44,7 +44,7 @@
"description_data": [
{
"lang": "eng",
"value": "An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.5.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials."
"value": "An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials."
}
]
},
@ -77,4 +77,4 @@
"source": {
"discovery": "EXTERNAL"
}
}
}