• info
• discussion
• exploit
• solution
• references

IBM Cúram Social Program Management JSP Scriplet Open Redirection Vulnerability

IBM Cúram Social Program Management is prone to an open-redirection vulnerability.

An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.

IBM Cúram Social Program Management 6.0.5 is vulnerable; other versions may also be affected.