{"action":"Upgrade flarum/core to 1.8.5 or later.","affected":[{"fixed":"1.8.5","introduced":"0"}],"component":"flarum/core","cve_ids":["CVE-2024-21641"],"ecosystem":"Packagist","epss":0.01067,"exploited":false,"fixed_versions":["1.8.5"],"ghsa_id":"GHSA-733r-8xcp-w9mr","id":"tcs_01M5KEXKW2ZNAJV0TTMYW62WK0","modified_at":"2026-09-10T03:50:09.257139836Z","published_at":"2024-01-05T20:53:17Z","references":["https://osv.dev/vulnerability/GHSA-733r-8xcp-w9mr","https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr","https://nvd.nist.gov/vuln/detail/CVE-2024-21641","https://github.com/flarum/flarum-core/commit/ee8b3b4ad1413a2b0971fdd9e40f812d2a3a9d3a","https://github.com/flarum/framework/commit/7d70328471cf3091d92d95c382d277aec7996176"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-733r-8xcp-w9mr","url":"https://osv.dev/vulnerability/GHSA-733r-8xcp-w9mr"}],"summary":"Flarum's logout Route allows open redirects"}