CVE-2022-38184

Publication date

2022-08-16 17:20:14

Family

Esri

State

PUBLISHED

Description

There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a remote, unauthenticated attacker to access an API that may induce Esri Portal for ArcGIS to read arbitrary URLs.