CVE-2024-7211 — The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.

CVE-2024-7211

The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites. PUBLISHED

Description (CNA)

The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.

Affected (CNA)

Vendor / product	Versions
1E / 1E Platform	affected 24.7; affected 23.11.1.15; affected 23.7.1.80; affected 8.4.1.229

CWE

No CWE identifiers supplied.

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2024-2001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.