Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
https://joruri.org/docs/2018060400041/ | vendor advisory |
https://jvn.jp/en/jp/JVN58052567/index.html | third party advisory |