CVE-2021-20105 Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref'…

Description

Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
AppNitro Machform	Versions non publiées

Autres CVE de AppNitro Machform

Les 5 CVE de AppNitro Machform →

CVE-2021-20104 Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization… Non notée CVE-2021-20103 Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file… Non notée CVE-2021-20102 Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place Non notée CVE-2021-20101 Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers Non notée