中
4.3
The product fails to sufficiently validate callback URLs, allowing them to be manipulated with...
CVE-2024-12141
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when processed through a weak regular expression or when validation is omitted.
An attacker can exploit this by crafting a link that appears legitimate but redirects users to an attacker-controlled page. This redirection facilitates phishing attacks, enabling the harvesting of sensitive user information, potentially leading to unauthorized access or data theft.
出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
参照URL
- web security.docs.wso2.com
- web nvd.nist.gov
- web security.docs.wso2.com
- web github.com