← Database

CVE-2022-38201

MEDIUM CVSS: 6.1 Published: 2022-11-15 Modified: 2026-06-17

Description

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain.

Affected Platforms

Esri Arcgis Quickcapture

Weakness Type

CWE-601

References