id: CVE-2023-24735 info: name: PMB 7.4.6 - Open Redirect author: r3Y3r53 severity: medium description: | PMB v7.4.6 contains an open redirect vulnerability via the component /opac_css/pmb.php. An attacker can redirect a user to an external domain via a crafted URL and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations. remediation: | Upgrade PMB to a version that has addressed the open redirect vulnerability (CVE-2023-24735). reference: - https://github.com/AetherBlack/CVE/blob/main/PMB/readme.md - https://github.com/AetherBlack/CVE/tree/main/PMB - https://nvd.nist.gov/vuln/detail/CVE-2023-24735 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2023-24735 cwe-id: CWE-601 epss-score: 0.01149 epss-percentile: 0.83204 cpe: cpe:2.3:a:pmb_project:pmb:7.4.6:*:*:*:*:*:*:* metadata: verified: true max-request: 1 vendor: pmb_project product: pmb shodan-query: http.favicon.hash:1469328760 tags: cve,cve2023,redirect,pmb http: - method: GET path: - "{{BaseURL}}/pmb/opac_css/pmb.php?url=https://oast.me&hash={{md5('https://oast.me')}}" matchers: - type: regex part: header regex: - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)?(?:[a-zA-Z0-9\-_\.@]*)oast\.me\/?(\/|[^.].*)?$' # digest: 490a0046304402204e8fae3e6c7534810e36ecda817b8ed002652a48a5e5ee30dc6ea5113179e897022027e62c06fccad6ad629ce8be1a081878f1a5fc6fdb404efd8186b893e0a16001:922c64590222798bb761d5b6d8e72950