CVE-2024-1240
CVSS 3.1 Score 4.6 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 601
Summary
CVE-2024-1240 is a newly disclosed open redirection vulnerability affecting pyload version 0.5.0. This issue stems from the application's flawed handling of the 'next' parameter in its login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, potentially leading to phishing or other malicious activities. Users are advised to upgrade to the patched version, pyload-ng 0.5.0b3.dev79, to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.