.. / CVE-2023-6786

• Open Redirect
• Nuclei
• Web

Exploit for Payment Gateway for Telcell < 2.0.4 - Open Redirect (CVE-2023-6786)

Description:

The plugin does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue

Nuclei Template

View the template here CVE-2023-6786.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-6786.yaml

References: