CVE-2024-37656

Name of the Vulnerable Software and Affected Versions: gnuboard5 version 5.5.16

Description: The issue is related to an open redirect vulnerability that allows a remote attacker to obtain sensitive information. This is due to insufficient URL parameter verification in the "bbs/logout.php" endpoint.

Recommendations: For gnuboard5 version 5.5.16, consider restricting access to the "bbs/logout.php" endpoint until a patch is available. As a temporary workaround, avoid using the vulnerable URL parameter in the affected endpoint to minimize the risk of exploitation.