CVE-2026-120327 : 詳細

CVE-2026-120327

2026-11-03
10h17 +00:00
A01-Broken Access Control
2026-11-03
19h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

参考資料