| Package | Affected versions | Patched versions |
|---|---|---|
| platform | = 23.11.1.15= 23.7.1.80= 24.7= 8.4.1.229 |
The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free