CVE-2024-7211: 1e Platform

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with the patch that includes the fix.

Affected products

• 1e Platform: version 8.4.1.229 only; version 23.7.1.80 only; version 23.11.1.15 only; version 24.7 only

Published 2024-08-01. Last modified 2026-06-17.