Lucene search
HistoryJun 26, 2024 - 3:15 p.m.
CVE-2024-4604
url redirection
magarsus consultancy
sso
single sign on
hidden fields
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields.This issue affects SSO (Single Sign On): from 1.0 before 1.1.
References
Related
cve
cve
CVE-2024-4604
2024-06-26 15:15:20
cvelist
cvelist
CVE-2024-4604 Open Redirect in Magarsus Consultancy's SSO
2024-06-26 15:09:22
vulnrichment
vulnrichment
CVE-2024-4604 Open Redirect in Magarsus Consultancy's SSO
2024-06-26 15:09:22
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for NVD:CVE-2024-4604