CVE-2020-26219: Open Redirect in touchbase.ai

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-11 · updated 2026-06-17
Weakness: CWE-601

Description

touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-controlled content, which in some cases even cause XSS attacks. So even though an open redirection might sound harmless at first, the impacts of it can be severe should it be exploitable. The issue is fixed in version 2.0.

Affected products

puncsky touchbase.ai: before 2.0 — fixed in 2.0

How to fix

Upgrade to a fixed version: puncsky touchbase.ai 2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-26219 or the next vulnerability affects your stack