CVE-2023-6552

Summary

CVE-2023-6552 refers to a vulnerability in which the validation of the "current" GET parameter is missing during the language change action. This issue results in an open redirect vulnerability, allowing an attacker to redirect users to malicious websites, potentially leading to data theft or phishing attacks. Users are strongly advised to update their systems to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.