CVE-2024-4604 MEDIUM

CVE-2024-4604: Open Redirect in Magarsus Consultancy's SSO

Vendor Magarsus Consultancy
Product SSO (Single Sign On)
Weakness CWE-601 · Open redirect
Published June 26, 2024
Last update June 3, 2026
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields. This issue affects SSO (Single Sign On): from 1.0 before 1.1.

Key dates

02Disclosure timeline

June 26, 2024 CVE published
June 3, 2026 Record updated