CVE-2023-50297

Summary

Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

Affected Software

VendorProductVersion RangeStatus
Alfasado Inc.PowerCMS (PowerCMS 6 Series)6.31 and earlieraffected
Alfasado Inc.PowerCMS (PowerCMS 5 Series)5.24 and earlieraffected
Alfasado Inc.PowerCMS (PowerCMS 4 Series)4.54 and earlieraffected

Weaknesses

  • Open Redirect

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References