CVE-2024-21641

MEDIUM EPSS 60.6%
Published Jan 5, 20242y ago · Modified Jun 17, 20262w ago
4.7 CVSS 3.1
Medium
Find Similar
Published Jan 5, 2024 2y ago
Last Modified Jun 17, 2026 2w ago

Description

Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum `/logout` route includes a redirect parameter that allows any third party to redirect users from a (trusted) domain of the Flarum installation to redirect to any link. For logged-in users, the logout must be confirmed. Guests are immediately redirected. This could be used by spammers to redirect to a web address using a trusted domain of a running Flarum installation. The vulnerability has been fixed and published as flarum/core v1.8.5. As a workaround, some extensions modifying the logout route can remedy this issue if their implementation is safe.

CVSS Details

Base Score
4.7
Exploitability
2.8
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Changed
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
60.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-601

Affected Products 1

VendorProductVersionRange
flarumflarum* <1.8.5

References 3

  • github.com https://github.com/flarum/flarum-core/commit/ee8b3b4ad1413a2b0971fdd9e40f812d2a3a9d3a
    Patch
  • github.com https://github.com/flarum/framework/commit/7d70328471cf3091d92d95c382d277aec7996176
    Patch
  • github.com https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr
    PatchVendor Advisory

Remediation

  • github.com https://github.com/flarum/flarum-core/commit/ee8b3b4ad1413a2b0971fdd9e40f812d2a3a9d3a
    Patch
  • github.com https://github.com/flarum/framework/commit/7d70328471cf3091d92d95c382d277aec7996176
    Patch
  • github.com https://github.com/flarum/framework/security/advisories/GHSA-733r-8xcp-w9mr
    PatchVendor Advisory