CVE-2020-36845

CVE-2020-36845 describes an open redirect vulnerability in the KnowBe4 Security Awareness Training application prior to January 10, 2020. An attacker could craft a malicious URL that, when clicked by a user, would redirect them to an arbitrary HTTPS destination, potentially leading to phishing or other social engineering attacks. With a CVSS score of 6.1 (Medium), this vulnerability is network-exploitable with low complexity, requiring user interaction, and could result in limited confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.