Описание
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hitachienergy:microscada_x_sys600:10.5:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.0033
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-601
CWE-601
Связанные уязвимости
CVSS3: 4.3
github
больше 1 года назад
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
EPSS
Процентиль: 55%
0.0033
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-601
CWE-601