e-Gov Client Application (Windows version) versions before 2.1.1.0 and e-Gov Client Application (macOS version) versions before 1.1.1.0 are vulnerable to improper authorization in handler for custom URL scheme. A crafted URL may direct the product to access an arbitrary website. As a result, the user may become a victim of a phishing attack.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
e-gov e-gov |
Vulmon