CVE-2022-38208

CVE-2022-38208 describes an unvalidated redirect vulnerability in Esri Portal for ArcGIS, affecting version 11 and earlier. The issue lets a remote, unauthenticated attacker craft a URL that redirects a victim to an arbitrary website, enabling phishing-like attacks. Connected sources corroborate ...