CVE-2024-47530

Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.

• CWE-601

• https://github.com/Clinical-Genomics/scout/commit/50055edfca9a7183b248019af97e1fb0b0065a02Patch
• https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-3x45-2m34-x95vExploit, Third Party Advisory

Published

Sep 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47525LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-47526LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…2.4
• CVE-2024-47527LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…5.4
• CVE-2024-47528LibreNMS is an open-source, PHP/MySQL/SNMP-based network mon…4.8
• CVE-2024-47529OpenC3 COSMOS provides the functionality needed to send comm…6.5
• CVE-2024-4753The WP Secure Maintenance WordPress plugin before 1.7 does n…4.8
• CVE-2024-47531Scout is a web-based visualizer for VCF-files. Due to the la…3.5
• CVE-2024-47532RestrictedPython is a restricted execution environment for P…6.5
• CVE-2024-47533Cobbler, a Linux installation server that allows for rapid s…9.8
• CVE-2024-47534go-tuf is a Go implementation of The Update Framework (TUF).…8.2
• CVE-2024-47535Netty is an asynchronous event-driven network application fr…5.5
• CVE-2024-47536Citizen is a MediaWiki skin that makes extensions part of th…5.4