References https://www.twcert.org.tw/tw/cp-132-6636-a35ed-1.html https://www.twcert.org.tw/newepaper/cp-151-6636-a35ed-3.html https://cve.imfht.com/detail/CVE-2022-39021?lang=en https://nvd.nist.gov/vuln/detail/CVE-2022-39021 https://vuldb.com/?id.212521 https://www.nsfocus.net/vulndb/71439 https://www.twcert.org.tw/en/cp-139-6646-c382a-2.html
Related VulnerabilitiesPoCCVE-2026-64849: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect BypassPoCbentoml-open-redirect: BentoML v1.3.9 - Open Redirect金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞PoCdzzoffice-installer: DzzOffice - Installer Page ExposurePoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open Redirect上海必智科技有限公司律师E通userID和officeID参数存在SQL注入漏洞PoCCVE-2021-45328: Gitea < 1.4.3 - Open RedirectPoCCVE-2023-49438: Python Flask-Security-Too <=5.3.2 - Open RedirectPoCCVE-2026-34847: Hoppscotch <= 2026.2.1 - Open RedirectPoCgitea-open-redirect-bypass: Gitea < 1.21.0 - Open Redirect友訊科技|DWM-222W Wi-Fi 6 USB 行動網路卡 - Brute-Force Protection BypassPoCCVE-2026-6203: User Registration & Membership WordPress plugin - Open RedirectPoCodoo-login-redirect: Reflected Odoo - Open Redirect