exploitDog

CVE-2024-28344

Опубликовано: 10 апр. 2024

Источник: nvd

CVSS3: 3.1

EPSS Низкий

Описание

An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1. The Open Redirect vulnerability allows attackers to control the "back" parameter in the URL through a double encoded URL.

Ссылки

https://securitycafe.ro/2024/03/21/cve-2024-28344-cve-2024-28345-in-sipwise-c5/
Exploit
Third Party Advisory
https://securitycafe.ro/2024/03/21/cve-2024-28344-cve-2024-28345-in-sipwise-c5/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sipwise:next_generation_communication_platform:*:*:*:*:-:*:*:*

Версия до mr11.5.1 (исключая)

EPSS

Процентиль: 13%

0.00043

Низкий

3.1 Low

CVSS3

Дефекты

CWE-601

Связанные уязвимости

GHSA-r43r-4m97-hpp9

CVSS3: 3.1

github

почти 2 года назад

An Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1. The Open Redirect vulnerability allows attackers to control the "back" parameter in the URL through a double encoded URL.

EPSS

Процентиль: 13%

0.00043

Низкий

3.1 Low

CVSS3

Дефекты

CWE-601