medium4.3
CVE-2024-7941
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL.
Impact
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Microscada X Sys600 | Version 10.5 |