.. / CVE-2024-0337

• Open Redirect
• Nuclei
• Web

Exploit for Travelpayouts <= 1.1.16 - Open Redirect (CVE-2024-0337)

Description:

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Nuclei Template

View the template here CVE-2024-0337.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-0337.yaml

References: