🔙 목록으로 돌아가기

CVE-2020-24550: EpiServer Find <13.2.7 - Open Redirect

TitleEpiServer Find <13.2.7 - Open Redirect
AuthordhiyaneshDK
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks.
RemediationUpgrade to EpiServer Find version 13.2.7 or later to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.64544
CVE IDCVE-2020-24550
CWE IDCWE-601
Tags cve cve2020 redirect episerver vuln

🔍 Vulnerability Description

EpiServer Find before 13.2.7 contains an open redirect vulnerability via the _t_redirect parameter in a crafted URL, such as a /find_v2/_click URL. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /find_v2/_click?_t_id&_t_q&_t_hit.id&_t_redirect=https://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.1) Gecko/20100101 Firefox/65.1
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24550.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-24550.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A