CVE-2023-4168: Templatecookie Adlisting Redirect ad-list information disclosure

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 46.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-08-05 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Templatecookie Adlisting: 2.14.0

References

http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.html
https://vuldb.com/?ctiid.236184
https://vuldb.com/?id.236184
http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.html
https://vuldb.com/?ctiid.236184
https://vuldb.com/?id.236184

Get alerted when CVE-2023-4168 or the next vulnerability affects your stack