VULNERABILITY INTELLIGENCE

CVE-2024-7211

CVSS score6.1 MEDIUM

EPSS probability0.24%

CISA KEVNot currently listed

Published2024-08-01

Last modified2026-06-17

Description

The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.