CVE-2023-3684
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk19th percentile — higher than 19% of all known CVEs
Summary
A vulnerability was found in LivelyWorks Articart 2.0.1, affecting some unknown functionality of the file /change-language/de_DE of the Base64 Encoding Handler component. Manipulation of the argument redirectTo leads to open redirect.
Risk Assessment
An attacker may remotely exploit this vulnerability to perform open redirect attacks, potentially leading to fraud or phishing.
Recommendation
It is recommended to update to the latest version of the software and monitor logs for potential exploitation attempts.
Original NVD description (English source)
A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/de_DE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack may be launched remotely. VDB-234230 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.