Description (CNA)
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hitachi Energy / MicroSCADA SYS600 | affected 10.0 through 10.5 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.