VULNERABILITY INTELLIGENCE

CVE-2024-6377

CVSS score8.1 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-08-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Description

An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.

Weakness classification

  • 3DS.Information-Security@3ds.com: CWE-601
  • nvd@nist.gov: CWE-601

Primary references