CVE-2024-54050: Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

3.1 CVSS

Description

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

Classification

CVE ID: CVE-2024-54050

CVSS Base Severity: LOW

CVSS Base Score: 3.1

Affected Products

Vendor: Adobe

Product: Adobe Connect

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.07% (probability of being exploited)

EPSS Percentile: 31.04% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://helpx.adobe.com/security/products/connect/apsb24-99.html

Timeline