Open Redirect Vulnerability in VI Web Client by Download VI

CVE-2023-38574

What is CVE-2023-38574?

The VI Web Client prior to version 7.9.6 contains an open redirect vulnerability that enables a remote, unauthenticated attacker to manipulate URLs, redirecting users to arbitrary web destinations. This flaw poses a significant risk as it can be exploited to conduct phishing attacks, potentially resulting in unauthorized access to sensitive information. Users of the VI Web Client should be aware of this vulnerability and update to the latest version to ensure their protection.

References