CVE-2024-25715

Summary

CVE-2024-25715 is a newly disclosed vulnerability affecting Glewlwyd Single Sign-On (SSO) servers version 2.x through 2.7.6. An attacker can exploit this issue by manipulating the 'redirect_uri' parameter, leading to open redirections. This vulnerability poses a significant security risk, allowing unauthorized access to sensitive information or resources by tricking users into clicking malicious links. Upgrading to the latest version of Glewlwyd or implementing proper input validation is recommended to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.