Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attackers to redirect users to arbitrary external sites using crafted URLs containing newlines, user credentials, or host mismatches.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2024-58342 XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, … https://www.cve.org/CVERecord?id=CVE-2024-58342
Post summary
The text announces CVE-2024-58342 as an open redirect vulnerability in XenForo, detailing the affected versions and the problematic function.
⚡ New CVE Alert: CVE-2024-58342 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-58342 #CVE-2024-58342 #CVE #Medium #CyberSecurity #InfoSec https://t.co/SJouIUs68S
Post summary
This tweet merely announces CVE‑2024‑58342 with medium severity, without providing technical details, mitigation information, or evidence of exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xenforo | xenforo | - | - | - |
| App | xenforo | xenforo | 2.3.0 | - | - |