CVE-2020-24550

PoC —

CVSS 3.1

6.1 medium

EPSS

5%p91

Published

Mar 31, 2021 (Mar 31, 2021)

Modified

Jun 17, 2026

Description

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirect parameter in a crafted URL, such as a /find_v2/_click URL.

Vendors: episerver
Products: find
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news0 stories

No ingested article mentions this CVE yet.