{"id":"CVE-2024-58342","state":"PUBLISHED","title":"XenForo Open Redirect via getDynamicRedirect","description":"XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attackers to redirect users to arbitrary external sites using crafted URLs containing newlines, user credentials, or host mismatches.","publishedAt":"2026-04-01T00:30:07.355Z","updatedAt":"2026-04-01T13:43:45.319Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["XenForo XenForo"],"affected":[{"vendor":"XenForo","product":"XenForo","versions":[{"version":"0","status":"affected","lessThan":"2.2.17","versionType":"semver"},{"version":"2.3.0","status":"affected","lessThan":"2.3.1","versionType":"semver"}]}],"references":["https://xenforo.com/community/threads/xenforo-2-2-17-released-security-fix.227797/","https://www.vulncheck.com/advisories/xenforo-open-redirect-via-getdynamicredirect"],"weaknesses":["CWE-601"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/58xxx/CVE-2024-58342.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-58342","state":"PUBLISHED","datePublished":"2026-04-01T00:30:07.355Z","dateUpdated":"2026-04-01T13:43:45.319Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-04-01T00:19:58.384Z"},"containers":{"cna":{"title":"XenForo Open Redirect via getDynamicRedirect","descriptions":[{"lang":"en","value":"XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL. The getDynamicRedirect() function does not adequately validate the redirect target, allowing attackers to redirect users to arbitrary external sites using crafted URLs containing newlines, user credentials, or host mismatches."}],"affected":[{"vendor":"XenForo","product":"XenForo","versions":[{"version":"0","status":"affected","lessThan":"2.2.17","versionType":"semver"},{"version":"2.3.0","status":"affected","lessThan":"2.3.1","versionType":"semver"}]}],"references":[{"url":"https://xenforo.com/community/threads/xenforo-2-2-17-released-security-fix.227797/","name":"XenForo 2.2.17 Released (Security Fix)","tags":["vendor-advisory","patch"]},{"url":"https://www.vulncheck.com/advisories/xenforo-open-redirect-via-getdynamicredirect","name":"VulnCheck Advisory: XenForo Open Redirect via getDynamicRedirect","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-601","lang":"en","description":"URL Redirection to Untrusted Site ('Open Redirect')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-04-01T01:43:17.895Z"},"datePublic":"2024-12-20T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xenforo:xenforo:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:xenforo:xenforo:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"2.3.1"}]}]}],"credits":[{"lang":"en","value":"mattrogowski","type":"finder"},{"lang":"en","value":"Jake B.","type":"finder"},{"lang":"en","value":"ThemeHouse","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-01T13:42:03.799051Z","id":"CVE-2024-58342","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-01T13:43:45.319Z"}}]}}}