CVE-2026-12863:详情

CVE-2026-12863

2026-06-22
10h16 +00:00
A01-Broken Access Control
2026-10-25
23h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

参考资料