← Database

CVE-2024-38485

MEDIUM CVSS: 4.3 Published: 2024-12-09 Modified: 2026-06-17

Description

Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads to sensitive information leakage.

Affected Platforms

Dell Elastic Cloud Storage

Weakness Type

CWE-601

References