The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can...

0.69

github-advisories · v1 · published 11/3/2026, 12:31:47 PM · modified 11/3/2026, 12:31:53 PM · TLP:CLEAR

offsec.vulnerability

Source evidence ↗

Entities

ghsa: GHSA-4gvg-mc6q-56hfcve: CVE-2026-120327cwe: CWE-601

Assessment

Fact summary

low · heuristic

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.

Technical delta

low · heuristic

Automated delta unavailable (heuristic mode).

Defensive significance

low · heuristic

None identified (heuristic mode).

Extracted text

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.