Description (CNA)
Open redirection vulnerability due to insufficient validation of the X-Forwarded-Host HTTP header. An attacker could create manipulated links that, when opened by a victim, cause the victim to be redirected to domains controlled by the attacker, enabling phishing or deception attacks with limited impact on confidentiality and integrity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Password Manager / Password Manager | affected 0 before 08/07/2025; unaffected 08/07/2025 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.