Lucene search
HistoryAug 29, 2024 - 6:15 p.m.
CVE-2024-44776
open redirect
vtiger crm
attackers
malicious site
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.4%
An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.
Affected configurations
Node
vtigervtiger_crmMatch7.4.0-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vtiger | vtiger_crm | 7.4.0 | cpe:2.3:a:vtiger:vtiger_crm:7.4.0:-:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-44776
2024-08-29 00:00:00
cvelist
cvelist
CVE-2024-44776
2024-08-29 00:00:00
cve
cve
CVE-2024-44776
2024-08-29 18:15:14
zdt
zdt
vTiger CRM 7.4.0 Cross Site Scripting / Open Redirection Vulnerabilities
2024-08-29 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.4%
Related for NVD:CVE-2024-44776