CVE-2023-49281

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-49281
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-49281.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-49281
Aliases
  • GHSA-g2gp-x888-6xrj
Published
2023-12-01T22:10:05.927Z
Modified
2025-11-29T15:01:25.717546Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CVSS Calculator
Summary
Open Redirect in Login Function of Calendarinho
Details

Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occurs when a web application redirects users to external URLs without proper validation. This can lead to phishing attacks, where users are tricked into visiting malicious sites, potentially leading to information theft and reputational damage to the website used for redirection. The problem is has been patched in commit 15b2393. Users are advised to update to a commit after 15b2393. There are no known workarounds for this vulnerability.

Database specific 
{
    "cwe_ids": [
        "CWE-601"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49281.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/cainor/calendarinho

Affected ranges

Type
GIT
Repo
https://github.com/cainor/calendarinho
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
15b2393efd69101727d27a4e710880ce46e84d70
Fixed
9a0174bef939565a76cbe7762996ecddca9ba55e
Fixed
c77defeb0103c1f7a4709799b8751aaeb0d09eed

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-49281.json"