Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87349
HistoryOct 12, 2022 - 12:00 a.m.

Patrik Dufresne Rdiffweb user redirection vulnerability

2022-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
patrik dufresne
rdiffweb
web application
user redirection vulnerability
usa
malicious links
hyperlink injection
email invitations

EPSS

0.001

Percentile

30.0%

Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious links when sending email invitations, enabling hyperlink injection.

EPSS

0.001

Percentile

30.0%