Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
https://excellium-services.com/cert-xlm-advisory/CVE-2023-35791 | third party advisory |
https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-35791 |