Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a remote attacker to spoof the URL display via a specially crafted webpage.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/94830 | vdb entry third party advisory |
https://jvn.jp/en/jp/JVN28151745/index.html | vdb entry third party advisory |