What’s Vulnerable › Vulnerabilities

CVE-2024-39097

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-08-26 · updated 2026-06-17
• Weakness: CWE-601

Description

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path.

Affected products

• gnuboard5: before 6.0.5 — fixed in 6.0.5

How to fix

Upgrade to a fixed version: gnuboard5 6.0.5. Check the vendor advisory for mitigations.

References

• https://gist.github.com/Letm3through/1c7a422aa93b587fe63254e06b7f2977
• https://github.com/gnuboard/g6/commit/eb52096f8328a891879066400f4599d1153d8bf2
• https://github.com/gnuboard/g6/issues/557
• https://github.com/gnuboard/g6/issues/582

Get alerted when CVE-2024-39097 or the next vulnerability affects your stack