Lucene search
HistoryFeb 11, 2024 - 3:15 a.m.
CVE-2024-25715
glewlwyd sso server
open redirection
vulnerability
cve-2024-25715
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.
Affected configurations
Node
glewlwyd_sso_server_projectglewlwyd_sso_serverRange2.0.0–2.7.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| glewlwyd_sso_server_project | glewlwyd_sso_server | * | cpe:2.3:a:glewlwyd_sso_server_project:glewlwyd_sso_server:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-25715
2024-02-11 03:15:09
vulnrichment
vulnrichment
CVE-2024-25715
2024-02-11 00:00:00
osv
osv
CVE-2024-25715
2024-02-11 03:15:09
cvelist
cvelist
CVE-2024-25715
2024-02-11 00:00:00
ubuntucve
ubuntucve
CVE-2024-25715
2024-02-11 00:00:00
prion
prion
Open redirect
2024-02-11 03:15:00
debiancve
debiancve
CVE-2024-25715
2024-02-11 03:15:09
veracode
veracode
Open Redirect
2024-02-19 06:08:21
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.0%
Related for NVD:CVE-2024-25715