Gnuboard5 - Redirect Creation (CVE-2024-37656)
Description
An open redirect vulnerability in Gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php.
psychologyCrowdSec Analysis
CVE-2024-37656 is an open redirect vulnerability in gnuboard5 version 5.5.16, where insufficient URL parameter verification in bbs/logout.php allows remote attackers to redirect users to malicious sites. This flaw can be exploited to steal sensitive information through phishing attacks or social engineering.
CrowdSec has been tracking this vulnerability and its exploits since 26th of November 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2024-37656 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit this vulnerability by sending requests to /bbs/logout.php or /gnuboard5/bbs/logout.php with a crafted url parameter, causing users to be redirected to attacker-controlled domains.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2025-07-07 |
| Rule Released | 2025-11-26 |
| CrowdSec First Seen | 2025-12-05 |