CVE-2024-28076

Katalog CVE

CVSS 3.8 · Low EPSS 0,34%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada solarwinds platform. Skor CVSS 3.1 3.8 (Low) menurut NVD.

Deskripsi (NVD)

The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format

Rincian

Terbit di NVD

18 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.8 (Low), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28076 advisory vendor
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform... release notes