CVE-2026-120327:详情

CVE-2026-120327

2026-11-03
10h17 +00:00
A01-Broken Access Control
2026-11-03
19h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

参考资料