VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Apr 20, 2025· Updated Jun 17, 2026

CVE-2020-36845

CVE-2020-36845

Description

The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Knowbe4/Security Awareness Training3 versions
    cpe:2.3:a:knowbe4:security_awareness_training:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:knowbe4:security_awareness_training:*:*:*:*:*:*:*:*range: <2020-01-10
    • (no CPE)range: <2020-01-10
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.