CyberRota Analysis
AI-GeneratedA vulnerability exists in a web interface that inadequately encodes portions of the request URL, allowing unauthenticated attackers to inject arbitrary scripts and redirect users to external sites. This could enable attackers to execute actions with the compromised user's session privileges within the application. Organizations utilizing this web interface should prioritize remediation to mitigate the risk of session hijacking and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach. This allows an unauthenticated network attacker to craft a link that, when visited by a user, executes arbitrary script in the context of the affected application and can redirect the user's browser to an arbitrary external site. Successful exploitation could allow an attacker to act with the compromised user's session privileges within the application.