CVEs-PoC/2021/CVE-2021-24288.md

### [CVE-2021-24288](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24288)
![](https://img.shields.io/static/v1?label=Product&message=Newsletter%20via%20SMTP%2C%20Sendinblue%2C%20Sendgrid%2C%20Mailgun%20-%20AcyMailing%20SMTP%20Newsletter&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=7.5.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-601%20URL%20Redirection%20to%20Untrusted%20Site%20('Open%20Redirect')&color=brightgreen)

### Description

When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.

### POC

#### Reference
- https://wpscan.com/vulnerability/56628862-1687-4862-9ed4-145d8dfbca97

#### Github
- https://github.com/20142995/nuclei-templates
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates