CVSS
5.3
CVSS v4.0
EPSS
0.3%
Exploit Prediction Score
Published
August 7, 2026
Exploitability
EPSS probability 0.3%
Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within the application that, when visited, redirects the user’s browser to an arbitrary third-party site. This can be abused for phishing attacks, where users receive a trusted domain link but are redirected to a phishing website. This issue affects TeamDavid through Rollout 524.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).