CVE-2023-48003
An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' in the WebSocket messages.
CVSS 3.1 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products