Description

The referrer URL used by MFA required additional sanitizing, rather than being used directly.

Remediation

References

CVE-2024-33999

Related Vulnerabilities

WordPress Plugin Push Notifications for WordPress (Lite) Cross-Site Request Forgery (6.0)

WordPress Plugin 404 SEO Redirection SQL Injection (1.0)

WordPress Plugin NextGEN Gallery-WordPress Gallery PHP Object Injection (3.1.5)

WordPress Plugin Easy Testimonial Slider Unspecified Vulnerability (1.0.2)

WebLogic CVE-2018-3252 Vulnerability (CVE-2018-3252)

Severity

Critical

Classification

CVE-2024-33999 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities