A vulnerability was found in kalcaddle kodbox 1.67 Build 02, affecting the SSO API Login component. The manipulation of the callbackUrl argument leads to an open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond. This vulnerability could allow attackers to redirect users to [truncated]
A vulnerability was found in kalcaddle kodbox 1.67 Build 02, affecting the msgWarning plugin. This issue allows for improper authorization, which can be exploited remotely. The exploit has been made public, and although the vendor was notified, no response was received. The vulnerability impacts kodbox deployments using the msgWarning plugin, requiring defenders to assess exposure and prioritize verificat [truncated]
