CVEvulnerability

CVE-2023-36085

6.1 MEDIUM Published 2023-10-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601

Description

The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.

Affected configurations

• sisqualwfm sisqualwfm (>= 7.1.319.103 < 7.1.319.111)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References