U-Office Force Login Open Redirect Vulnerability

CVE-2022-39021 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website.

Learn more about our Cis Benchmark Audit For Microsoft Office.