CVE-2024-7211 — The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.
The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirectio…
Published: 2024-08-01 · CVSS: 4.7 · CVSS 3.1
The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7