CVE-2024-25706 Information
Apr 06, 2024
cve
Description
There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow a remote unauthenticated attacker to craft a URL which when clicked could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks.