CVE-2022-22797
Sysaid – sysaid Open Redirect
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Sysaid – sysaid Open Redirect
Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" request from the url location: /CommunitySSORedirect.jsp?redirectURL=https://google.com. Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to a URL contained within untrusted input. By modifying untrusted URL input to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Reserved 2022-01-07 | Published 2022-05-12 | Updated 2024-09-16 | Assigner INCDCWE-601 URL Redirection to Untrusted Site ('Open Redirect')
Moriel Harush - Sophtix Security LTD
www.gov.il/en/departments/faq/cve_advisories
Support options
