CVE-2024-0545: CodeCanyon RISE Ultimate Project Manager signin redirect

Published Jan 15, 2024

Updated

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects unknown code of the file /index.php/signin. The manipulation of the argument redirect with the input http://evil.com leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

FairSketch Rise Ultimate Project Manager=3.5.3

Event History

Jan 15, 2024

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

May 25, 57281

Event

via NVD·03:00 AM

Frequently Asked Questions

What is the severity of CVE-2024-0545?

CVE-2024-0545 is classified as a problematic vulnerability due to its potential for open redirect exploitation.

How do I fix CVE-2024-0545?

To remediate CVE-2024-0545, ensure proper validation of redirect arguments in the /index.php/signin file.

What is the impact of CVE-2024-0545?

CVE-2024-0545 allows attackers to redirect users to malicious websites, potentially leading to phishing attacks.

Which software versions are affected by CVE-2024-0545?

CVE-2024-0545 affects Fairsketch Rise - Ultimate Project Manager version 3.5.3.

What type of vulnerability is CVE-2024-0545?

CVE-2024-0545 is categorized as an open redirect vulnerability.