CVE-2024-47530
Medium
Description
Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.
SeverityMedium
CVSS5.4
Exploit probability—
ProductClinical-genomics Scout
PublishedSep 30, 2024
First seenSep 30, 2024
Weakness typeCWE-601Open redirect
How to fix
Update
- clinical-genomics scout4.89 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clinical-genomics scout | v < 4.89 | 4.89 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.