PT-2021-1708

CVE-2021-1310

·

Published

2021-01-13

·

Updated

2024-04-11

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings (affected versions not specified)
Description The issue is related to improper input validation of the URL parameters in an HTTP request, allowing an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism. This can be exploited by persuading a user to click a crafted link, potentially leading to phishing attacks. The vulnerability is known as an open redirect attack, which could convince users to unknowingly visit malicious sites.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾