CVE-2023-39371
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
In version 2023-02-16 of StarTrinity Softswitch, there is an Open Redirect vulnerability that may lead to unauthorized redirection of users to malicious sites.
Risk Assessment
An attacker could exploit this vulnerability for phishing scams or other actions aimed at data theft from users.
Recommendation
It is recommended to update the software to the latest version to eliminate this vulnerability and implement additional security mechanisms against redirects.
Other vulnerabilities in StarTrinity Softswitch
See all- CVE-2023-39372High
StarTrinity Softswitch version 2023-02-16 contains multiple CSRF vulnerabilities (CWE-352) that may allow attackers to perform unauthorized actions on behalf of users.
- CVE-2023-39370High
In version 2023-02-16 of StarTrinity Softswitch, there is a persistent XSS vulnerability (CWE-79) that may allow attackers to inject malicious JavaScript code into the application.
- CVE-2023-39369High
Version 2023-02-16 of StarTrinity Softswitch has multiple reflected XSS vulnerabilities (CWE-79). An attacker can exploit these vulnerabilities to inject malicious JavaScript code into server responses.
Original NVD description (English source)
StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601)