CVE-2026-120327:詳細資料

CVE-2026-120327

2026-11-03
10h17 +00:00
A01-Broken Access Control
2026-11-03
19h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-601 URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

參考資料