CVE-2022-38201 in Portal for ArcGIS Quick Capture Web Designer

Resumen

por MITRE • 2022-11-16

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Environmental Systems Research Institute, Inc.
• Reservar: 2022-08-12
• Divulgación: 2022-11-16
• Moderación: aceptado
• Artículo: VDB-213771
• CPE: listo
• CWE: CWE-601 (confirmado)
• CVSS: 6.1 (CNA)
• EPSS: 0.00483
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-38201
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-38201
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-38201/