CVE-2024-21723

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Inadequate parsing of URLs could result into an open redirect.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Feb 29, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-217246.1Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.CVE-2024-217256.1Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.CVE-2024-217266.5Inadequate content filtering leads to XSS vulnerabilities in various components.CVE-2024-217276.1XSS vulnerability in DP Calendar component for Joomla.CVE-2024-217286.1An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provCVE-2024-217296.1Inadequate input validation leads to XSS vulnerabilities in the accessiblemedia field.CVE-2024-21738.8Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access CVE-2024-217305.4The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector.CVE-2024-217316.1Improper handling of input could lead to an XSS vector in the StringHelper::truncate method.CVE-2024-217326.1FlyCms through abbaa5a allows XSS via the permission management feature.CVE-2024-217335.3Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 thrCVE-2024-217345.4SAP Marketing (Contacts App) - version 160, allows an attacker with low privileges to trick a user to open malicious page which could lead t
CVE-2024-21723: Medium severity, CVSS 4.3 | Vulnix