CVE-2024-46331

Name of the Vulnerable Software and Affected Versions ModStartCMS version 8.8.0

Description The issue allows attackers to redirect users to an arbitrary website via a crafted URL, exploiting an open redirect vulnerability in the redirect parameter at the "/admin/login" API endpoint.

Recommendations For ModStartCMS version 8.8.0, consider disabling the redirect parameter in the "/admin/login" API endpoint until a patch is available. Restrict access to the "/admin/login" endpoint to minimize the risk of exploitation. Avoid using the redirect parameter in the affected API endpoint until the issue is resolved.