High severity8.0NVD Advisory· Published Oct 22, 2021· Updated Jun 17, 2026

CVE-2020-23050

Description

TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirstName parameter of the user account input field. This vulnerability allows attackers to execute phishing attacks, external redirects, and arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TAO/Open Source Assessment Platformdescription
TAO/TAO Open Source Assessment Platformllm-fuzzy
Range: 3.3.0 RC02

Patches

Vulnerability mechanics

References

www.vulnerability-lab.com/get_content.phpnvdExploitThird Party Advisory
cwe.mitre.org/data/definitions/79.htmlnvdTechnical Description

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000