CVE-2024-4882CWE-601

URL Redirection to Arbitrary Site Exists in Sitefinity

Medium · published July 8, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00384 · 31.3th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-07-08T17:29Z
EPSS history
Timeline
  • 08 JUL 17:29Z
    URL Redirection to Arbitrary Site Exists in Sitefinity
    cvelistv5