← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2023-5375 · published 4 October 2023
CVE-2023-5375: Mosparo open redirect vulnerability
Mosparo · Mosparo
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.
6.1 CVSS 3.1 Medium EPSS 35% · top 1.6% CWE-601 · Open redirect
6.1CVSS 3.1 base score
35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD
Description
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://github.com/mosparo/mosparo/commit/9d5da367b78b8c883bfef5f332ffea26292f99e8 | PatchVendor Advisory |
| https://huntr.dev/bounties/3fa2abde-cb58-45a3-a115-1727ece9acb9 | ExploitThird Party Advisory |
| https://github.com/mosparo/mosparo/commit/9d5da367b78b8c883bfef5f332ffea26292f99e8 | PatchVendor Advisory |
| https://huntr.dev/bounties/3fa2abde-cb58-45a3-a115-1727ece9acb9 | ExploitThird Party Advisory |
Track CVE-2023-5375 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
8.8CVE-2023-5687Mosparo cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.EPSS 0.32%4.7CVE-2012-0518Oracle Fusion Middleware SSO open redirect flawOracle Fusion Middleware 10.1.4.3.0 contains an unspecified open redirect vulnerability in the Application Server Single Sign-On component, tracked a…KEVEPSS 4.7%analysed6.1CVE-2021-38000Google Chrome Android Intents input validation open redirectChrome on Android before 95.0.4638.69 fails to properly validate untrusted input passed through Intents, allowing a crafted HTML page to redirect the…KEVEPSS 4.9%analysed
Source: NIST National Vulnerability Database (record CVE-2023-5375), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
