CVE-2026-120638
2026-11-04
00h17 +00:00
00h17 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
CVE 설명
CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.
redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, //evil.example/ becomes //evil.example/ and sends the user to another host.
CVE 정보
관련 약점
| 약점 이름 | 출처 | |
|---|---|---|
| Incorrect Behavior Order: Validate Before Canonicalize The product validates input before it is canonicalized. |
||
| URL Redirection to Untrusted Site The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect. |
