जमा करें #636360: TOTVS Portal Meu RH 12.1.17 Open Redirect combined with phishing in password resetजानकारी

शीर्षकTOTVS Portal Meu RH 12.1.17 Open Redirect combined with phishing in password reset
विवरणAn Open Redirect vulnerability in the password recovery flow of the TOTVS Meu RH Portal platform allows attackers to manipulate the redirectUrl parameter, causing the application to send legitimate emails that redirect users to malicious external domains, enabling highly convincing phishing attacks.
स्रोत⚠️ https://drive.google.com/file/d/1iorjSJ8gh3hTDZUy1fHyV-TJXFP43yIo/view?usp=sharing
उपयोगकर्ता
 Trenshyiavv (UID 86876)
सबमिशन17/08/2025 04:54 AM (1 वर्ष पहले)
संयम19/08/2025 07:14 PM (3 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि320579 [TOTVS Portal Meu RH तक 12.1.17 Password Reset redirectUrl Redirect]
अंक17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!