CVE-2023-25829 | BDVDB-2026-201946 Detail
EsriPortal for ArcGIS
Description#
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
Impact#
CAPEC-73 User-Controlled Filename
Weaknesses#
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.