CVE-2024-28287

HIGH · CVSS 7.3 EPSS 0.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-04-02 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.3. See the original NVD description below for full technical details.

CVE

CVE-2024-28287

Severity

HIGH

CVSS

7.3

EPSS

0.41%

Original NVD Description

A DOM-based open redirection in the returnUrl parameter of INSTINCT UI Web Client 6.5.0 allows attackers to redirect users to malicious sites via a crafted URL.