{"id":"CVE-2024-58398","revision":"7d21f72d568d4b0c941b47e55fb7bb3c","records":[{"revision":"7d21f72d568d4b0c941b47e55fb7bb3c","observedAt":"2026-10-25T01:17:17.137+00:00","statement":{"source":"nvd","id":"CVE-2024-58398","aliases":[],"title":"Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, wh…","description":"Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, when clicked by a logged-in user, redirects the victim to an attacker-controlled website for phishing.","state":0,"publishedAt":"2026-10-17T19:16:27.86+00:00","modifiedAt":"2026-10-21T22:16:46.353+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · disclosure@vulncheck.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":5.3,"severity":"MEDIUM"},{"system":"CVSS 3.1 · disclosure@vulncheck.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","score":4.3,"severity":"MEDIUM"}],"references":["https://github.com/coder/coder/commit/69c1d981e3131e50d52b01f6a360abadaad699e6","https://github.com/coder/coder/security/advisories/GHSA-wcx9-ccpj-hx3c","https://www.vulncheck.com/advisories/coder-2.3.1-before-2.16.1-open-redirect-via-login-page-redirect-parameter"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-58398","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Awaiting Analysis","weaknesses":["CWE-601"],"productCriteria":[],"sourceDates":{"published":"2026-10-17T19:16:27.860","lastModified":"2026-10-21T22:16:46.353"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2024-58398","identifiers":["CVE-2024-58398"]},"retained":false,"historicalAffected":[]}],"coverage":[]}