Description The referrer URL used by MFA required additional sanitizing, rather than being used directly. Remediation References CVE-2024-33999 Related Vulnerabilities Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-32275) phpList Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-22249) MySQL CVE-2016-9842 Vulnerability (CVE-2016-9842) WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.1.22) Oracle Database Server CVE-2019-2909 Vulnerability (CVE-2019-2909) Severity Critical Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CVE-2024-33999