Submit #437207: Apereo CAS 6.6 Open Redirect

The _Open Redirect_ vulnerability allows an attacker to manipulate internal redirects within a web application. This occurs when the application accepts user inputs to redirect to other URLs but does not correctly validate these inputs.

An attacker can exploit this flaw by providing a malicious URL that, when followed by users, redirects them to phishing, malicious, or unauthorized sites, compromising data security and user trust in the application.

• Source: ⚠️ https://gist.github.com/0xArthurSouza/68295d8fa20f18161945260fcdf842a2
• User: Arthur Souza (UID 76781)
• Submission: 11/05/2024 01:24 (2 years ago)
• Moderation: 11/14/2024 07:53 (9 days later)
• Status: Accepted
• VulDB entry: 284521 [Apereo CAS 6.6 /login redirect_uri]
• Points: 20