CVE-2024-21641
2 advisories.
Packagist/flarum/core CVE-2024-21641: medium 6.5, EPSS 1.07%
Flarum's logout Route allows open redirects
Action: Upgrade flarum/core to 1.8.5 or later.
composer require flarum/core:1.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.5 | - |
Fixed versions
| 1.8.5 |
Sources
- osv: GHSA-733r-8xcp-w9mr
- https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr
- https://nvd.nist.gov/vuln/detail/CVE-2024-21641
- https://github.com/flarum/flarum-core/commit/ee8b3b4ad1413a2b0971fdd9e40f812d2a3a9d3a
- https://github.com/flarum/framework/commit/7d70328471cf3091d92d95c382d277aec7996176
CVE-2024-21641 · published · modified · JSON
Packagist/flarum/framework CVE-2024-21641: medium 6.5, EPSS 1.07%
Flarum's logout Route allows open redirects
Action: Upgrade flarum/framework to 1.8.5 or later.
composer require flarum/framework:1.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.5 | - |
Fixed versions
| 1.8.5 |
Sources
- osv: GHSA-733r-8xcp-w9mr#Packagist/flarum/framework
- https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr
- https://nvd.nist.gov/vuln/detail/CVE-2024-21641
- https://github.com/flarum/flarum-core/commit/ee8b3b4ad1413a2b0971fdd9e40f812d2a3a9d3a
- https://github.com/flarum/framework/commit/7d70328471cf3091d92d95c382d277aec7996176
CVE-2024-21641 · published · modified · JSON