CVE-2021-42564

An open redirect through HTML injection in confidential messages in Cryptshare before 5.1.0 allows remote attackers with permission to provide confidential messages via Cryptshare to redirect targeted victims to any URL via the 'meta http-equiv="refresh"' substring in the editor parameter...

CVE-2021-42564

creationtimestamp| type| source ---|---|--- 2021-11-30 22:34:41+00:00| seen| https://t.me/cibsecurity/33132...

CVE-2021-42564

CVE-2021-42564 affects Cryptshare (Web App component) prior to 5.1.0. An HTML injection in the confidentiality workflow allows an attacker with permission to provide confidential messages to trigger an open redirect by injecting a in the editor parameter, causing recipients to be redirected to a...