CVE-2024-54050 MEDIUM

CVE-2024-54050: Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

Vendor Adobe
Product Adobe Connect
Weakness CWE-601 · Open redirect
Published December 10, 2024
Last update January 7, 2025
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

Key dates

02Disclosure timeline

December 10, 2024 CVE published
January 7, 2025 Record updated