Lucene search
HistorySep 09, 2024 - 3:15 a.m.
CVE-2024-8586
webitr
open redirect
unauthorized remote attackers
forge urls
phishing attacks
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulnerability to forge URLs. Users, believing they are accessing a trusted domain, can be redirected to another page, potentially leading to phishing attacks.
Affected configurations
Node
uniongwebitrRange<2_1_0_28
Related
cve
cve
CVE-2024-8586
2024-09-09 03:15:10
vulnrichment
vulnrichment
CVE-2024-8586 Uniong WebITR - Open Redirect
2024-09-09 03:07:46
cvelist
cvelist
CVE-2024-8586 Uniong WebITR - Open Redirect
2024-09-09 03:07:46
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-8586