CVE-2023-4714

PlayTube Redirect information disclosure

CVSS 4.3 MEDIUMEPSS 5.2%CWE-200

Vexday Risk Score

28Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 4.3EPSS 5.2%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

01 Sep 2023Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of the component Redirect Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The identifier VDB-238577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

n/a · PlayTube

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/174446/PlayTube-3.0.1-Information-Disclosure.html https://vuldb.com/?ctiid.238577 https://vuldb.com/?id.238577