Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•4 views

CVE-2024-55452: URL Redirection to Untrusted Site

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...

5.4CVSS5.9AI score0.00267EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/16 12:00 a.m.•27 views

PT-2024-36520 · Ujcms · Ujcms

Name of the Vulnerable Software and Affected Versions: UJCMS version 9.6.3 Description: A URL redirection vulnerability exists in UJCMS due to improper validation of URLs in the upload and rendering of new block/carousel items. This issue allows authenticated attackers to redirect unprivileged...

5.4CVSS6.7AI score0.00267EPSS
SaveExploits1References7
Mend
Mend
•added 2024/12/16 12:00 a.m.•1 views

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...

5.4CVSS0.00267EPSS
SaveExploits1References4
Rows per page
Query Builder