CVE-2024-6377: URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6377?
The severity of CVE-2024-6377 is classified as medium due to the potential for an attacker to redirect users to malicious sites.
How do I fix CVE-2024-6377?
To fix CVE-2024-6377, update 3DPassport in 3DSwymer to the latest version released beyond R2024x.
Who is affected by CVE-2024-6377?
CVE-2024-6377 affects users of 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x.
What type of vulnerability is CVE-2024-6377?
CVE-2024-6377 is an open redirect vulnerability that allows redirection to untrusted sites.
Can CVE-2024-6377 be exploited remotely?
Yes, CVE-2024-6377 can be exploited remotely by an attacker through crafted URLs.