Submit #437207: Apereo CAS 6.6 Open Redirect

The _Open Redirect_ vulnerability allows an attacker to manipulate internal redirects within a web application. This occurs when the application accepts user inputs to redirect to other URLs but does not correctly validate these inputs.

An attacker can exploit this flaw by providing a malicious URL that, when followed by users, redirects them to phishing, malicious, or unauthorized sites, compromising data security and user trust in the application.

• Quelle: ⚠️ https://gist.github.com/0xArthurSouza/68295d8fa20f18161945260fcdf842a2
• Benutzer: Arthur Souza (UID 76781)
• Einreichung: 05.11.2024 01:24 (vor 2 Jahren)
• Moderieren: 14.11.2024 07:53 (9 days later)
• Status: Akzeptiert
• VulDB Eintrag: 284521 [Apereo CAS 6.6 /login redirect_uri Redirect]
• Punkte: 20