Security Issue: Pdf viewer with strange suffix redirecting to multiple sites

Software Support
1

Describe the issue or problem
Recently I noticed strange traffic spike in google search console where a url suffix to my ojs domain added as "MyDomain/plugins/generic/pdfJsViewer/pdf.js/web/viewer.html?file=%2Findex.php%2Findex%2Flogin%2FsignOut%3Fsource%3D.su7u.shop%2Fmale%2F&id=3zLX61

After opening this url in new tab i found that its redirecting to multiple sites. Can you please check if its somekind of security issue with my installation and how to fix this?

What application are you using?
OJS 3.3.0.8

Additional information
See screenshot of search consol and then redirecting to other url when opeing it

ss1
ss1535Ɨ289 31.3 KB

ss2
ss21920Ɨ1080 91.8 KB

ss3
ss31920Ɨ1080 82.8 KB

ss4
ss41920Ɨ1080 84.5 KB

ss5
ss51920Ɨ1080 87.1 KB

ss6
ss61920Ɨ1080 85.7 KB

2

Hi @aabahishti,

See #11242, which has already been fixed in more recent releases of OJS. OJS 3.3.0-8 is quite old ā€“ Iā€™d strongly suggest upgrading to at least the most recent release of OJS 3.3.0-x.

Regards,
Alec Smecher
Public Knowledge Project Team