CVE-2020-28150

MEDIUM

i-net Clear Reports 20.10.136 - Open Redirect via User-Controlled Input

Title source: llm

Description

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://c41nc.co.uk/?page_id=85

Scores

CVSS v3 6.1

EPSS 0.0091

EPSS Percentile 55.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (1)

inetsoftware/i-net_clear_reports 20.10.136

Published Mar 09, 2021

Tracked Since Feb 18, 2026