CVE-2024-3032

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-3032
Themify Builder WordPress plugin before 7.5.8 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://wpscan.com/vulnerability/d130a60c-c36b-4994-9b0e-e52cd7f99387/ Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:themify:themify_builder:*:*:*:*:*:wordpress:*:*
History

02 Jul 2024, 14:45

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1
References () https://wpscan.com/vulnerability/d130a60c-c36b-4994-9b0e-e52cd7f99387/ - () https://wpscan.com/vulnerability/d130a60c-c36b-4994-9b0e-e52cd7f99387/ - Exploit, Third Party Advisory
First Time Themify
Themify themify Builder
CPE cpe:2.3:a:themify:themify_builder:*:*:*:*:*:wordpress:*:*
CWE CWE-601

13 Jun 2024, 18:36

Type Values Removed Values Added
Summary
  • (es) El complemento Themify Builder de WordPress anterior a 7.5.8 no valida un parámetro antes de redirigir al usuario a su valor, lo que genera un problema de Open Redirect

13 Jun 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-13 06:15

Updated : 2024-07-02 14:45

NVD link : CVE-2024-3032

Mitre link : CVE-2024-3032

CVE.ORG link : CVE-2024-3032

JSON object : View

Products Affected

themify

  • themify_builder
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')