CVE-2022-27090 Information

Description

Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Reference

https://gitee.com/shenshaoqing/cms/issues/I4X3F9 Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

REQUIRED

Confidentiality Impact

CHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

NONE

Base Severity

5.4