Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection Vulnerability

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by entering a URL into a field in the user interface. A successful exploit could allow the attacker to generate a Webex Meetings invitation email that contains a link to a destination of their choosing. Because this email is sent from a trusted source, the recipient may be more likely to click the link.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

输入验证不恰当

Cisco WebEx Meetings Server 注入漏洞

Cisco WebEx Meetings Server（CWMS）是美国思科（Cisco）公司的WebEx会议方案中的一套包含音频、视频和Web会议的多功能会议解决方案。 Cisco Webex Meetings Server Software 存在注入漏洞，该漏洞源于攻击者可利用该漏洞在用户界面的字段中输入URL。

N/A

注入