Orta CVSS 5.4
CVE-2024-2372: CVE-2024-2372: açık yönlendirme
Açıklama (NVD)
The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation constraints. This allows an attacker to provide a crafted URL that can redirect users to an arbitrary external domain. By leveraging this open redirection vulnerability, an attacker can craft a malicious link that, when clicked by a user, redirects them to an attacker-controlled page. This can be used in conjunction with social engineering techniques to execute phishing attacks, aiming to obtain sensitive information or cause other harm.
Özet bilgiler
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - EPSS
- %0,20 (yüzdelik 10)
- CWE
- CWE-601
- Yama
- Yok / bilinmiyor