Open Redirect in Cainor Calendarinho
CVE-2023-49281
Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occurs when a web application redirects users to external URLs without proper validation. This can lead to phishing attacks, where users are tricked into visiting malicious sites, potentially leading to information theft and reputational damage to the website used for redirection. The problem is has been patched in commit `15b2393`. Users are advised to update to a commit after `15b2393`. There are no known workarounds for this vulnerability.
Vulnerability class: Open Redirect
EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N.
Affected products
- Cainor Calendarinho — versions < 15b2393
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2023-49281?
- CVE-2023-49281 is a medium-severity vulnerability in Cainor Calendarinho, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 4.7/10. Published 2023-12-01.
- How severe is CVE-2023-49281?
- Medium severity. CVSS v3 base score is 4.7 out of 10.