CVE-2024-58342 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect ta…
Medium CVSS: 5.3

CVE-2024-58342

XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attackers to redirect users to arbitrary external sites using crafted URLs containing newlines, user credentials, or host mismatches.
Vendor
Xenforo
Product
Xenforo
CWE
CWE-601
Yayın Tarihi
2026-04-01 01:16:39
Güncelleme
2026-04-01 18:54:10
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-601 Xenforo MEDIUM Xenforo 2026

Referanslar

https://www.vulncheck.com/advisories/xenforo-open-redirect-via-getdynamicredirect https://xenforo.com/community/threads/xenforo-2-2-17-released-security-fix.227797/