CVE-2023-25829

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions 10.9.1 through 11.0

Description The issue allows a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.

Recommendations For Esri Portal for ArcGIS version 10.9.1, update to a version that includes the fix for this issue. For Esri Portal for ArcGIS version 11.0, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.