1. Vulnerability Details
|
CVE-ID |
|
|
Description |
The 1E Platform’s component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.
Note: 1E Platform’s component using the third-party Duende Identity Server has been updated with the patch that includes the fix. |
|
CVSS3.1 Score |
Base Score 4.7 (Medium) |
|
CVSS3.1 Vector String |
|
|
Problem type |
2. Affected products and versions
|
Product
|
Versions
|
|---|---|
|
1E Platform |
24.7 |
|
1E Platform |
23.11.1.15 |
|
1E Platform |
23.7.1.80 |
|
1E Platform |
8.4.1.229 |