CVE-2024-12760: Open Redirect in bentoml/bentoml
An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Other sources
Rejected reason: REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-4940. Notes: All CVE users should reference CVE-2024-4940 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12760?
CVE-2024-12760 is classified as a high severity vulnerability due to its potential for exploitation in phishing attacks and credential theft.
How do I fix CVE-2024-12760?
To mitigate CVE-2024-12760, upgrade to a version of bentoml that is higher than 1.3.9, which contains fixes for this vulnerability.
What type of attacks can exploit CVE-2024-12760?
CVE-2024-12760 can be exploited for phishing, malware distribution, and credential theft through an open redirect.
Which versions of bentoml are affected by CVE-2024-12760?
CVE-2024-12760 affects bentoml version 1.3.9 and earlier versions.
Can CVE-2024-12760 be exploited without authentication?
Yes, CVE-2024-12760 can be exploited by remote unauthenticated attackers.