CVE-2024-8526CWE-601
Automated Logic WebCTRL and Carrier i-Vu Open Redirect
Medium · published November 21, 2024
What it is
A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously
crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection
of the user to a malicious webpage via "index.jsp"
The record
Technical detail
- CVSS v4.0
- 5.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00657 · 50.8th percentile
- Weakness
- CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
- Published
- 2024-11-21T15:29Z
EPSS history
Timeline