Security Bulletins
1E-2024-2001
1E platform URL redirection
1. Vulnerability Details
CVE-ID | |
Description | The 1E Platform’s component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.
Note: 1E Platform’s component using the third-party Duende Identity Server has been updated with the patch that includes the fix. |
CVSS3.1 Score | Base Score 4.7 (Medium) |
CVSS3.1 Vector String | |
Problem type |
2. Affected products and versions
| Product | Versions |
|---|---|
1E Platform | 24.7 |
1E Platform | 23.11.1.15 |
1E Platform | 23.7.1.80 |
1E Platform | 8.4.1.229 |