CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated user clicks on the malicious block item, they are redirected to the arbitrary untrusted domains, where sensitive tokens, such as JSON Web Tokens, can be stolen via a crafted webpage.

• CWE-601

• https://github.com/cydtseng/Vulnerability-Research/blob/main/ujcms/OpenRedirect-BlockItemUpload.mdExploit, Third Party Advisory
• https://github.com/dromara/ujcmsProduct

Published

Dec 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-55417DevDojo Voyager through version 1.8.0 is vulnerable to bypas…4.3
• CVE-2024-5542The Master Addons – Free Widgets, Hover Effects, Toggle, Con…6.1
• CVE-2024-5543The Slideshow Gallery LITE plugin for WordPress is vulnerabl…8.1
• CVE-2024-5544The Media Library Assistant plugin for WordPress is vulnerab…6.1
• CVE-2024-5545The Motors – Car Dealer, Classifieds & Listing plugin for Wo…5.3
• CVE-2024-55451A Stored Cross-Site Scripting (XSS) vulnerability exists in …4.8
• CVE-2024-55456lunasvg v3.0.1 was discovered to contain a segmentation viol…6.5
• CVE-2024-55457MasterSAM Star Gate 11 is vulnerable to directory traversal …6.5
• CVE-2024-55459An issue in keras 3.7.0 allows attackers to write arbitrary …6.5
• CVE-2024-5546Zohocorp ManageEngine Password Manager Pro versions before 1…8.8
• CVE-2024-55460A time-based SQL injection vulnerability in the login page o…9.8
• CVE-2024-55461SeaCMS <=13.0 is vulnerable to command execution in phome.ph…9.8