Description

The system allows the introduction of a link to an external site controlled by a malicious actor. This site can then redirect the user to a different site in the original tab, making it look like a legitimate redirect performed by the system.

Impact

Redirect to the user to an external site controlled by a malicious actor in the tab where original site was, leading to a phishing attack.

Recommendation

Set the attribute rel with the noopener and noreferrer value in each external link.

Threat

Anonymous attacker from local network.

Expected Remediation Time

⏱️ 15 minutes.

Requirements

Fixes