CVE-2024-58342 in XenForo

Сводка (Английский)

XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attackers to redirect users to arbitrary external sites using crafted URLs containing newlines, user credentials, or host mismatches.

Ответственный

VulnCheck

Резервировать

01.04.2026

Раскрытие

01.04.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
354536	XenForo URL getDynamicRedirect	601	Не определено	Официальное исправление	CVE-2024-58342