CVE-2026-12863:詳細資料

CVE-2026-12863

2026-06-22
10h16 +00:00
A01-Broken Access Control
2026-10-25
23h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

參考資料