CVE-2024-55452

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55452
A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated user clicks on the malicious block item, they are redirected to the arbitrary untrusted domains, where sensitive tokens, such as JSON Web Tokens, can be stolen via a crafted webpage.

5.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/OpenRedirect-BlockItemUpload.md Exploit Third Party Advisory
https://github.com/dromara/ujcms Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:ujcms:ujcms:9.6.3:*:*:*:*:*:*:*
History

24 Apr 2025, 15:20

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de redirección de URL en UJCMS 9.6.3 debido a una validación incorrecta de las URL en la carga y representación de nuevos elementos de bloque/carrusel. Esta vulnerabilidad permite a los atacantes autenticados redirigir a usuarios sin privilegios a una página web arbitraria controlada por el atacante. Cuando un usuario autenticado hace clic en el elemento de bloque malicioso, se lo redirige a dominios arbitrarios que no son de confianza, donde se pueden robar tokens confidenciales, como tokens web JSON, a través de una página web manipulada.
First Time Ujcms
Ujcms ujcms
CPE cpe:2.3:a:ujcms:ujcms:9.6.3:*:*:*:*:*:*:*
References () https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/OpenRedirect-BlockItemUpload.md - () https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/OpenRedirect-BlockItemUpload.md - Exploit, Third Party Advisory
References () https://github.com/dromara/ujcms - () https://github.com/dromara/ujcms - Product

17 Dec 2024, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.4
CWE CWE-601

16 Dec 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-16 23:15

Updated : 2025-04-24 15:20

NVD link : CVE-2024-55452

Mitre link : CVE-2024-55452

CVE.ORG link : CVE-2024-55452

JSON object : View

Products Affected

ujcms

  • ujcms
CWE
CWE-601

URL Redirection to Untrusted Site ('Open Redirect')