CVE-2024-38485

Description

Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads to sensitive information leakage.

PUBLISHED Reserved 2024-06-18 | Published 2024-12-09 | Updated 2024-12-09 | Assigner dell

Problem types

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Product status

References

www.dell.com/...dell-ecs-host-header-injection-vulnerability vendor-advisory

cve.org (CVE-2024-38485)

nvd.nist.gov (CVE-2024-38485)

Download JSON