Open Redirect Vulnerability in SHIRASAGI Product by SS Project

CVE-2022-43479

What is CVE-2022-43479?

The SHIRASAGI application, versions v1.14.4 to v1.15.0, contains an open redirect vulnerability that permits remote unauthenticated attackers to redirect users to arbitrary external websites. This can be exploited to conduct phishing attacks, deceiving users into visiting malicious sites that may lead to credential theft or malware installation. Implementing proper input validation and user notification mechanisms can help mitigate the risks associated with this vulnerability.

References