Lucene search

K
cveMitreCVE-2024-25715
HistoryFeb 11, 2024 - 3:15 a.m.

CVE-2024-25715

2024-02-1103:15:09
CWE-601
mitre
web.nvd.nist.gov
43
cve-2024-25715
glewlwyd sso
server
open redirection
vulnerability
nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.0%

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.

Affected configurations

Nvd
Node
glewlwyd_sso_server_projectglewlwyd_sso_serverRange2.0.02.7.6
VendorProductVersionCPE
glewlwyd_sso_server_projectglewlwyd_sso_server*cpe:2.3:a:glewlwyd_sso_server_project:glewlwyd_sso_server:*:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.0%