CVE-2024-25706 — HTMLi at createFolder Content Injection
There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could pot…
Published: 2024-04-04 · CVSS: 6.1 · CVSS 3.1
There is an HTML injection vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7