| |
Podatność CVE-2024-25706
Publikacja: 2024-04-04
Opis: |
There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks. |
Typ:
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Referencje: |
https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2024-update-2/
|
|
|
Copyright 2024, cxsecurity.com
|
|
|