CVE Feed

    Dashboard / CVE / CVE-2020-26219

    CVE-2020-26219

    touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it can be severe should it be exploitable. The issue is fixed in version 2.0.

    Published:Nov 11, 2020
    Last Modified:Nov 21, 2024
    EPS:Nov 11, 2020
    EPSS Score:0.002
    CVSS Score:4.7

    Affected Products

    Vendor
    Touchbase.ai Project
    Product
    Touchbase.ai

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High