CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28799

A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 29.3%

CVSS Severity

CVSS v3 Score 8.2

References

Products affected by CVE-2023-28799

Zscaler » Client Connector » Version: Any

cpe:2.3:a:zscaler:client_connector:*
Zscaler » Client Connector » Version: N/A

cpe:2.3:a:zscaler:client_connector:-
Zscaler » Client Connector » Version: 1.10.1

cpe:2.3:a:zscaler:client_connector:1.10.1
Zscaler » Client Connector » Version: 1.3

cpe:2.3:a:zscaler:client_connector:1.3
Zscaler » Client Connector » Version: 1.3.0.31

cpe:2.3:a:zscaler:client_connector:1.3.0.31
Zscaler » Client Connector » Version: 1.3.1

cpe:2.3:a:zscaler:client_connector:1.3.1
Zscaler » Client Connector » Version: 1.3.1.6

cpe:2.3:a:zscaler:client_connector:1.3.1.6
Zscaler » Client Connector » Version: 1.9

cpe:2.3:a:zscaler:client_connector:1.9
Zscaler » Client Connector » Version: 2.1

cpe:2.3:a:zscaler:client_connector:2.1
Zscaler » Client Connector » Version: 2.1.2

cpe:2.3:a:zscaler:client_connector:2.1.2
Zscaler » Client Connector » Version: 2.1.2.105

cpe:2.3:a:zscaler:client_connector:2.1.2.105
Zscaler » Client Connector » Version: 2.1.2.112

cpe:2.3:a:zscaler:client_connector:2.1.2.112
Zscaler » Client Connector » Version: 2.1.2.113

cpe:2.3:a:zscaler:client_connector:2.1.2.113
Zscaler » Client Connector » Version: 2.1.2.81

cpe:2.3:a:zscaler:client_connector:2.1.2.81
Zscaler » Client Connector » Version: 3.1

cpe:2.3:a:zscaler:client_connector:3.1
Zscaler » Client Connector » Version: 3.1.0

cpe:2.3:a:zscaler:client_connector:3.1.0
Zscaler » Client Connector » Version: 3.1.0.111

cpe:2.3:a:zscaler:client_connector:3.1.0.111
Zscaler » Client Connector » Version: 3.1.0.117

cpe:2.3:a:zscaler:client_connector:3.1.0.117
Zscaler » Client Connector » Version: 3.1.0.129

cpe:2.3:a:zscaler:client_connector:3.1.0.129
Zscaler » Client Connector » Version: 3.2

cpe:2.3:a:zscaler:client_connector:3.2
Zscaler » Client Connector » Version: 3.2.0.87

cpe:2.3:a:zscaler:client_connector:3.2.0.87
Zscaler » Client Connector » Version: 3.2.1.1

cpe:2.3:a:zscaler:client_connector:3.2.1.1
Zscaler » Client Connector » Version: 3.4

cpe:2.3:a:zscaler:client_connector:3.4
Zscaler » Client Connector » Version: 3.4.0.124

cpe:2.3:a:zscaler:client_connector:3.4.0.124
Zscaler » Client Connector » Version: 3.4.1.4

cpe:2.3:a:zscaler:client_connector:3.4.1.4
Zscaler » Client Connector » Version: 3.5

cpe:2.3:a:zscaler:client_connector:3.5
Zscaler » Client Connector » Version: 3.5.0.108

cpe:2.3:a:zscaler:client_connector:3.5.0.108
Zscaler » Client Connector » Version: 3.6

cpe:2.3:a:zscaler:client_connector:3.6
Zscaler » Client Connector » Version: 3.6.1

cpe:2.3:a:zscaler:client_connector:3.6.1
Zscaler » Client Connector » Version: 3.6.1.20

cpe:2.3:a:zscaler:client_connector:3.6.1.20
Zscaler » Client Connector » Version: 3.6.1.23

cpe:2.3:a:zscaler:client_connector:3.6.1.23
Zscaler » Client Connector » Version: 3.6.1.26

cpe:2.3:a:zscaler:client_connector:3.6.1.26
Zscaler » Client Connector » Version: 3.7

cpe:2.3:a:zscaler:client_connector:3.7
Zscaler » Client Connector » Version: 3.7.0.182

cpe:2.3:a:zscaler:client_connector:3.7.0.182
Zscaler » Client Connector » Version: 3.7.0.183

cpe:2.3:a:zscaler:client_connector:3.7.0.183
Zscaler » Client Connector » Version: 3.7.1.42

cpe:2.3:a:zscaler:client_connector:3.7.1.42
Zscaler » Client Connector » Version: 3.7.1.48

cpe:2.3:a:zscaler:client_connector:3.7.1.48
Zscaler » Client Connector » Version: 3.7.1.49

cpe:2.3:a:zscaler:client_connector:3.7.1.49

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28799

Products

Pricing

Contact Us