Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Corezoid Process Engine 安全漏洞
Vulnerability Description
Corezoid Process Engine是Corezoid公司的一个应用程序。帮助公司在云中构建、管理、托管和运行流程。 Corezoid Process Engine 6.6.0版本存在安全漏洞，该漏洞源于OAuth2实现中redirect_uri参数存在开放重定向，可能导致授权代码拦截和未经授权的账户访问。
CVSS Information
N/A
Vulnerability Type
N/A