CVE-2024-5492 : Open redirect vulnerability allows a remote unauthenticated attacker to redirect

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

Published 2024-07-10 19:15:11

Updated 2024-08-01 13:59:49

View at NVD, CVE.org

Vulnerability category: Open redirect

Products affected by CVE-2024-5492

Please log in to view affected product information.

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 45 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.1	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/V...	N/A	N/A	Citrix Systems, Inc.	2024-07-10
Attack Vector: Network Attack Complexity: Low Attack Requirements: None Privileges Required: None User Interaction: Active Confidentiality (VC): Low Integrity (VI): Low Availability (VA): None

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Jump to