CVE-2023-28799 (published 2023-06-22T19:06:24.943Z)

A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain. 
Affected products: Vendor: Zscaler
Product: Client Connector
Versions: 0