← Zuruck zu CVEs

CVE-2020-36912

CRITICAL

9.8

Beschreibung

Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht1/6/2026

Zuletzt geandert1/8/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-601

Referenzen

https://exchange.xforce.ibmcloud.com/vulnerabilities/185521(disclosure@vulncheck.com)

https://packetstormsecurity.com/files/158473(disclosure@vulncheck.com)

https://www.plexus.es/(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter(disclosure@vulncheck.com)

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.