{"id":"CVE-2020-36912","state":"PUBLISHED","title":"Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter","description":"Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.","publishedAt":"2026-01-06T15:52:23.088Z","updatedAt":"2026-01-06T19:29:31.634Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Plexus Plexus anblick Digital Signage Management"],"affected":[{"vendor":"Plexus","product":"Plexus anblick Digital Signage Management","versions":[{"version":"3.1.13","status":"affected"}]}],"references":["https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php","https://packetstormsecurity.com/files/158473","https://exchange.xforce.ibmcloud.com/vulnerabilities/185521","https://www.plexus.es/","https://www.vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter"],"weaknesses":["CWE-601"],"ingestedAt":"2026-10-29T19:47:24.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/36xxx/CVE-2020-36912.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-36912","state":"PUBLISHED","datePublished":"2026-01-06T15:52:23.088Z","dateUpdated":"2026-01-06T19:29:31.634Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-03T14:10:13.301Z"},"containers":{"cna":{"title":"Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter","descriptions":[{"lang":"en","value":"Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter."}],"affected":[{"vendor":"Plexus","product":"Plexus anblick Digital Signage Management","versions":[{"version":"3.1.13","status":"affected"}]}],"references":[{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php","name":"Zero Science Lab Disclosure (ZSL-2020-5573)","tags":["third-party-advisory"]},{"url":"https://packetstormsecurity.com/files/158473","name":"Packet Storm Security Exploit Entry","tags":["exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/185521","name":"IBM X-Force Vulnerability Exchange Entry","tags":["vdb-entry"]},{"url":"https://www.plexus.es/","name":"Plexus Vendor Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter","name":"VulnCheck Advisory: Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.1,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-601","lang":"en","description":"URL Redirection to Untrusted Site ('Open Redirect')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-01-06T15:52:23.088Z"},"datePublic":"2020-07-19T00:00:00.000Z","credits":[{"lang":"en","value":"LiquidWorm as Gjoko Krstic of Zero Science Lab","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-06T19:28:26.807693Z","id":"CVE-2020-36912","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-06T19:29:31.634Z"}}]}}}