CVE-2025-0970
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Feb 2, 2025
CWE ID 601
Summary
CVE-2025-0970 is a recently disclosed vulnerability that affects Zenvia Movidesk versions up to 25.01.22. The issue lies within an unknown functionality of the /Account/Login file, allowing for open redirects through manipulation of the ReturnUrl argument. This vulnerability can be exploited remotely and the exploit has been made public, increasing the risk for potential attacks. Upgrading to version 25.01.22.245a473c54 is the recommended solution to mitigate this issue and protect against potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.