CVE-2024-27291

CVE-2024-27291 describes an open redirect vulnerability in Docassemble, an expert system for guided interviews and document assembly, affecting versions prior to 1.4.97. An attacker could craft a malicious URL to redirect users to arbitrary external sites, potentially leading to phishing or other social engineering attacks. This vulnerability has a CVSS score of 6.1 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction, and resulting in low impact to confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.