CVE-2023-49394: Easycorp Zentao

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly.

Affected products

• Easycorp Zentao: up to and including 4.1.3

Published 2024-01-10. Last modified 2026-06-17.