{"id":"CVE-2024-7211","aliases":["EUVD-2024-48178","GHSA-62gh-q5g8-jv59"],"status":"published","title":"The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.","description":"The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.\n\nNote: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0024,"percentile":0.15271,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-601"],"published":"2024-08-01T16:49:47Z","modified":"2026-06-17T08:19:35Z","products":[{"vendor":"1e","product":"1e platform"},{"vendor":"1e","product":"platform"}],"references":[{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2024-2001/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7211"},{"url":"https://www.1e.com/trust-security-compliance/cve-info"},{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2024-2001"},{"url":"https://github.com/advisories/GHSA-62gh-q5g8-jv59"}],"sources":{"cve":[{"id":"CVE-2024-7211","title":"The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.","description":"The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.\n\nNote: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.","status":"published","published":"2024-08-01T16:49:47.597Z","modified":"2025-06-18T18:41:03.926Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:34:21.025267Z"}],"euvd":[{"id":"EUVD-2024-48178","description":"The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.\n\nNote: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.","status":"published","published":"2024-08-01T16:49:47Z","modified":"2025-06-18T18:41:03Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:20.01453Z"}],"ghsa":[{"id":"GHSA-62gh-q5g8-jv59","title":"The Identity Server used by 1E Platform could enable URL redirection to untrusted sites.\nNote:...","description":"The Identity Server used by 1E Platform could enable URL redirection to untrusted sites.\nNote: The Identity Server on 1E Platform has been updated with the necessary patch.","status":"published","published":"2024-08-01T18:32:50Z","modified":"2025-05-20T09:32:05Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:02:21.932853Z"}],"nvd":[{"id":"CVE-2024-7211","description":"The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users.\n\nNote: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.","status":"published","published":"2024-08-01T17:16:09.727Z","modified":"2026-06-17T08:19:35.693Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:10:15.933769Z"}]}}