CVE-2024-46326: Medium severity pkp pkb-lib vulnerability
Published Oct 21, 2024
·Updated
Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function.
Affected Software
1 affected component
Public Knowledge Project pkp-lib<3.4.0-7
Event History
Oct 21, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-46326?
CVE-2024-46326 is classified as a medium severity vulnerability due to the potential for open redirects.
2
How do I fix CVE-2024-46326?
To fix CVE-2024-46326, update pkp-lib to version 3.4.0-8 or later, ensuring proper input validation in the logout function.
3
Who is affected by CVE-2024-46326?
CVE-2024-46326 affects all versions of pkp-lib up to and including 3.4.0-7.
4
What type of vulnerability is CVE-2024-46326?
CVE-2024-46326 is an open redirect vulnerability resulting from insufficient input sanitization.
5
What are the potential impacts of CVE-2024-46326?
The potential impacts of CVE-2024-46326 include redirecting users to malicious sites, which can lead to phishing attacks.