Threats tagged 'ghsa-rq57-xmh8-7gj9'

Omnispace Agora Project versions through 26.10.0 have an open redirect vulnerability in the Ctrl.php redir() function. This flaw allows remote attackers to manipulate the objUrl parameter to redirect users to arbitrary external URLs. Such redirects can be exploited for phishing attacks and credential theft by tricking users into visiting malicious sites.