CVE-2026-78377: Open Redirect in Yordam Informatics's Library Automation System
URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing.
This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Yordam Informatics Library Information and Document Automation Program versions from v22.1 before v22.2. Deployments running v22.2 or later are not identified as affected by the provided information.
What does an attacker need to exploit this issue?
The vector is network-accessible and requires no attacker privileges, but user interaction is required. An attacker could use a crafted redirect to send a user to an untrusted site for phishing.
What should organizations do if they use an affected version?
Update to v22.2, which is outside the stated affected version range. Until updating, treat links to the application cautiously and warn users about redirects to unexpected destinations.