CVE-2024-39097

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path.
References
Link Resource
https://gist.github.com/Letm3through/1c7a422aa93b587fe63254e06b7f2977 Exploit Third Party Advisory
https://github.com/gnuboard/g6/issues/582 Exploit Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*

History

03 Sep 2025, 19:11

Type Values Removed Values Added
First Time Sir
Sir gnuboard
CPE cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*
References () https://gist.github.com/Letm3through/1c7a422aa93b587fe63254e06b7f2977 - () https://gist.github.com/Letm3through/1c7a422aa93b587fe63254e06b7f2977 - Exploit, Third Party Advisory
References () https://github.com/gnuboard/g6/issues/582 - () https://github.com/gnuboard/g6/issues/582 - Exploit, Issue Tracking, Vendor Advisory

Information

Published : 2024-08-26 15:15

Updated : 2025-09-03 19:11


NVD link : CVE-2024-39097

Mitre link : CVE-2024-39097

CVE.ORG link : CVE-2024-39097


JSON object : View

Products Affected

sir

  • gnuboard
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')