CyberRota Analysis
AI-GeneratedThe Meeting Room Booking System (MRBS) prior to version 1.12.2 is vulnerable to an open redirect flaw, allowing unauthenticated attackers to craft URLs that redirect users to malicious sites, potentially leading to phishing attacks. Organizations using MRBS should prioritize updating to version 1.12.2 to mitigate this risk, as there are no known workarounds available. This vulnerability is particularly relevant for administrators managing MRBS installations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available.