Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to redirect users to arbitrary web sites and spoof the origin of e-mail messages via unspecified vectors, aka "Exchange URL Redirection Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Exchange URL重定向漏洞
Vulnerability Description
Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序，它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。Outlook Web App（OWA）是其中的一个用于访问Exchange邮箱的Web浏览器版本。 当Microsoft OWA未能正确验证重定向令牌时，Microsoft Exchange中存在欺骗漏洞。成功利用此漏洞的攻击者可能将用户重定向至某个链接的任意域，而该链接看上去来自用户域。攻击者可能使用该漏洞来发送电子邮件，该邮件看上去来
CVSS Information
N/A
Vulnerability Type
N/A