Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2024-38454

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2024-38454.

Coverage Span: 2024-06-17
Reports: 1 related reports

Associated Reports & Timeline

Bishop Fox identified two flaws in Packet Tide's ExpressionEngine 7.3.15, fixed in 7.4.11: unauthenticated XSS (CVE-2024-38454) and open HTTP redirection, which can yield Super Admin accounts.