Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q7fc-v93r-h333

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted, malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted, malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.

EPSS

Процентиль: 44%
0.00214
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.8
nvd
больше 5 лет назад

A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted, malicious HTTP request to an affected device. A successful exploit could allow the attacker to redirect users to malicious sites.

CVSS3: 5.8
fstec
больше 5 лет назад

Уязвимость механизмам фильтрации URL-адресов системы обеспечения безопасности электронной почты Cisco Email Security Appliance, позволяющая нарушителю перенаправить пользователя на вредоносный сайт

EPSS

Процентиль: 44%
0.00214
Низкий

Дефекты

CWE-20