CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.3. See the original NVD description below for full technical details.
CVE
CVE-2024-58342
Severity
MEDIUM
CVSS
6.3
EPSS
0.15%
Original NVD Description
XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attackers to redirect users to arbitrary external sites using crafted URLs containing newlines, user credentials, or host mismatches.
Related CVEs
Other vulnerabilities affecting the same vendor(s)