CVE-2022-38201 in Portal for ArcGIS Quick Capture Web Designer

Sumário

de MITRE • 16/11/2022

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: Environmental Systems Research Institute, Inc.
• Reservar: 12/08/2022
• Divulgação: 16/11/2022
• Moderação: aceite
• Entrada: VDB-213771
• CPE: pronto
• CWE: CWE-601 (confirmado)
• CVSS: 6.1 (CNA)
• EPSS: 0.00483
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-38201
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-38201
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-38201/