CVE-2020-28150

MEDIUM 6.1CVE-2020-28150 · Published 09/03/2021 · updated 17/06/2026

In short

CVE-2020-28150 is a MEDIUM (CVSS 6.1) vulnerability affecting i-net clear reports (inetsoftware).
Chance of exploitation in the next 30 days (EPSS): 0.91%, higher than 60.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
i-net clear reports inetsoftware	`= 20.10.136`	No fix yet

Description

I-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that specifies a link to an external site, and uses the user supplied data in a Redirect.

References

c41nc.co.uk · Exploit

More vulnerabilities in i-net clear reports

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free