CVE-2022-46288

Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2022-12-19

Last modified

2025-04-17

Weaknesses

CWE-601

Affected products

• Electronic Bidding Core System (Jacic)
• Denshi Nyusatsu Core System (Japan Construction Information Center)

References

• https://jvn.jp/en/jp/JVN96321933/index.html
• https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf