medium4.7
CVE-2024-7211
The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to cont…
Impact
The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 1e | Platform | Versions 8.4.1.229, 23.7.1.80, 23.11.1.15, 24.7 |