Custom URL Redirection Vulnerability
CVE-2024-1227

6.5MEDIUM

Key Information:

Vendor

Rejetto

Status
Http File Server
Vendor
CVE Published:
12 March 2024

What is CVE-2024-1227?

An open redirect vulnerability, the exploitation of which could allow an attacker to create a custom URL and redirect a legitimate page to a malicious site.

Affected Version(s)

Http File Server 2.2a, build #124

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafael Pedrero
.
CVE-2024-1227 : Custom URL Redirection Vulnerability