Résumé
Payload: Untrusted redirect URL parameter exploit
Détails de l’avis
Impact
Under certain conditions, an attacker can craft a redirect link that sends a guest user to an untrusted destination after authenticating.
Patches
Users should upgrade Payload packages to >= 3.88.0 or >= 4.0.0-canary.27.
Workarounds
Upgrading is recommended. Until then, remove user-controlled redirect values from authentication flows or restrict them to known local paths.
Références
Vulnérabilités liées
Tout Supply chain →- CRITICALCVE-2026-108261
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
- MEDIUMCVE-2026-107718
AdonisJS: Unencoded route parameters can produce open redirects
- HIGHCVE-2026-101907
Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF
- MEDIUMCVE-2026-77609
Semantic MediaWiki has an open redirect in Special:URIResolver
- CRITICALCVE-2026-71428
unstructured: Server-Side Request Forgery in the URL-based partitioning
- MEDIUMCVE-2026-55461
Snipe-IT has an Open Redirect After User Edit