Описание
Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.10 (исключая)
Одновременно
cpe:2.3:a:adobe:connect:*:*:*:*:*:-:*:*
Одно из
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00042
Низкий
3.1 Low
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-601
Связанные уязвимости
CVSS3: 3.1
github
20 дней назад
Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link.
EPSS
Процентиль: 13%
0.00042
Низкий
3.1 Low
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-601