CVE-2026-12863 : Detail

CVE-2026-12863

2026-06-22
10h16 +00:00
A01-Broken Access Control
2026-10-25
23h10 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Referensi