CVE-2024-0545 — CodeCanyon RISE Ultimate Project Manager signin redirect

CVE-2024-0545

CodeCanyon RISE Ultimate Project Manager signin redirect PUBLISHED

Description (CNA)

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /index.php/signin. The manipulation of the argument redirect with the input http://evil.com leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / product	Versions
CodeCanyon / RISE Ultimate Project Manager	affected 3.5.3

CWE

CWE-601

References

https://vuldb.com/?id.250714
https://vuldb.com/?ctiid.250714
https://vuldb.com/?submit.266974

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.250714
https://vuldb.com/?ctiid.250714

CISA-ADP

No English description supplied.

No references supplied.