CVE-2020-24550 describes an Open Redirect vulnerability in EpiServer Find versions prior to 13.2.7, allowing attackers to redirect users to arbitrary external websites through a crafted URL utilizing the _t_redirect parameter. This medium-severity vulnerability (CVSS 6.1) has a low attack complexity and requires user interaction, potentially leading to information disclosure and limited integrity impact. While there is no evidence of active exploitation or public exploit code on platforms like Metasploit or ExploitDB, a Nuclei template exists for detection, and the vulnerability has a high EPSS and FAUCET Risk Score, indicating a significant potential for exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 13.2.7CPE matchmatch criteria | cpe:2.3:a:episerver:find:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.