CVE-2024-51321

Katalog CVE

CVSS 7.6 · High EPSS 0,34%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada zucchetti ad hoc infinity. Skor CVSS 3.1 7.6 (High) menurut CISA ADP.

Deskripsi (NVD)

In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication.

Rincian

Terbit di NVD

11 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.6 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://members.backbox.org/zucchetti-ad-hoc-infinity-multiple-vulnerabilities/ exploit · advisory pihak ketiga