CVE-2021-35966: Learningdigital.com, Inc. Orca HCM, пренасочване към

Описание

Оригинално описание

The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any website. Remote attackers can use the vulnerability to execute phishing attacks.

Засегнати продукти

• Learningdigital.com, Inc. Orca HCM: unspecified до 10.0

Вид слабост

• CWE-601 URL Redirection to Untrusted Site

История

Други уязвимости в Learningdigital.com, Inc. Orca HCM

• 4.3CVE-2021-35968
• 5.3CVE-2021-35967
• 9.8CVE-2021-35965
• 7.3CVE-2021-35964
• 9.8CVE-2021-35963

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-35966
• https://nvd.nist.gov/vuln/detail/CVE-2021-35966
• https://www.chtsecurity.com/news/ba7b3ae7-14f3-4970-b3f6-4d97d8c7ea25
• https://www.twcert.org.tw/tw/cp-132-4926-dc06b-1.html