.. / CVE-2024-0250

Exploit for Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect (CVE-2024-0250)

Description:

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Nuclei Template

View the template here CVE-2024-0250.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-0250.yaml
Copy

References:

https://github.com/fkie-cad/nvd-json-data-feeds
https://nvd.nist.gov/vuln/detail/CVE-2024-0250
https://wpscan.com/vulnerability/321b07d1-692f-48e9-a8e5-a15b38efa979/