6.1
CVSSv3

CVE-2023-36085

Published: 25/10/2023 Updated: 05/02/2024
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.

Vulnerable Product Search on Vulmon Subscribe to Product

sisqualwfm sisqualwfm

Exploits

SISQUAL WFM version 71319103 suffers from a host header injection vulnerability ...

Github Repositories

This repository contains information related CVE-2023-36085 a host header injection vulnerability discovered in SISQUALWFM version 7.1.319.103, which allows an attacker to manipulate webpage links or redirect users to a malicious site. This vulnerability was assigned CVE-2023-36085 and has been fixed in version 7.1.319.111 and above.

CVE-2023-36085 SISQUALWFM Host Header Injection Vulnerability This repository contains information related to a host header injection vulnerability discovered in SISQUALWFM version 71319103, which allows an attacker to manipulate webpage links or redirect users to a malicious site This vulnerability was assigned CVE-2023-36085 and has been fixed in version 71319111 and a