CVE-2022-22797
Sysaid – sysaid Open Redirect
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Sysaid – sysaid Open Redirect
| Assigner | INCD |
| Reserved | 2022-01-07 |
| Published | 2022-05-12 |
| Updated | 2024-09-16 |
Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" request from the url location: /CommunitySSORedirect.jsp?redirectURL=https://google.com. Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to a URL contained within untrusted input. By modifying untrusted URL input to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Moriel Harush - Sophtix Security LTD
https://www.gov.il/en/departments/faq/cve_advisories
