CVE-2024-57241 Open redirect in n/a
Attackers can redirect users to malicious sites via crafted GET requests in Dedecms, potentially facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-57241?
CVE-2024-57241 is a medium-severity vulnerability in Dedecms Dedecms, published on 11 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection.
Weakness: CWE-601
Which versions are affected by CVE-2024-57241?
It affects 1 product.
Products include Dedecms Dedecms.
How do I fix CVE-2024-57241?
No fix has been published for CVE-2024-57241 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-57241 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-57241 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in Dedecms Dedecms
Sources
Also known as GHSA-6vpc-jmr8-rh6f.