Unsecured Redirect in Asp.Net-Core-Inventory-Order-Management-System

Summary

An unknown feature in the Administrative Interface of Asp.Net-Core-Inventory-Order-Management-System may allow an attacker to execute code on your server without permission. This could happen remotely, and an exploit has been made public. It's recommended to update to the latest version to fix this security issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
go2ismail	asp.net-core-inventory-order-management-system	<= 9.20250118	–

Original title

A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipula...

Original description

A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvd CVSS2.0 6.5

nvd CVSS3.1 8.8

nvd CVSS4.0 5.3

Vulnerability type

CWE-698

CWE-705

https://github.com/Ghufran2/CVE-Asp.Net-Core-Inventory-Order-Management-System-A... Exploit Mitigation Third Party Advisory
https://vuldb.com/?ctiid.347985 Permissions Required VDB Entry
https://vuldb.com/?id.347985 Third Party Advisory VDB Entry
https://vuldb.com/?submit.758333 Third Party Advisory VDB Entry