CVE-2024-58342

XenForo Open Redirect (CVE-2024-58342): Affected: XenForo pre-2.2.17 and pre-2.3.1. Root cause: the getDynamicRedirect() path does not adequately validate the redirect target, allowing an open redirect via specially crafted URLs (including newlines, user credentials, or host mismatches). Impact: ...