N/A

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

指向未可信站点的URL重定向(开放重定向)

Cisco Crosswork Network Services Orchestrator 安全漏洞

Cisco Crosswork Network Services Orchestrator是美国思科（Cisco）公司的一个网络服务协调器。 Cisco Crosswork Network Services Orchestrator存在安全漏洞，该漏洞源于HTTP请求中的参数输入验证不当，允许未经身份验证的远程攻击者将用户重定向到恶意网页。

N/A

N/A