CVE-2022-38201 — An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.

CVE-2022-38201

An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. PUBLISHED

Description (CNA)

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain.

Affected (CNA)

Vendor / product	Versions
Esri / ArcGIS Quickcapture	affected 10.8.1 through 10.9.1

CWE

CWE-601

References

https://www.esri.com/arcgis-blog/products/product/uncategorized/portal-for-arcgis-quick-capture-security-patch-is-now-available

ADP enrichment

CVE

No English description supplied.

https://www.esri.com/arcgis-blog/products/product/uncategorized/portal-for-arcgis-quick-capture-security-patch-is-now-available

CISA-ADP

No English description supplied.

No references supplied.