PT-2026-25878 · Unknown · Url Redirect Extension

Guido Schmechel · Publicado 2026-03-17 · Atualizado 2026-03-17 · CVE-2026-4202

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The extension does not properly verify if an authenticated user has the necessary permissions to access redirects. This results in the exposure of redirect records when a page is edited. The issue concerns a failure in permission checks related to redirect access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Information Disclosure

Enumeração de Fraquezas

CWE-862

CWE-200

Identificadores relacionados

CVE-2026-4202

GHSA-755R-R738-MJGP

Produtos afetados

Url Redirect Extension

Referências · 7

• https://github.com/ayacoo/redirect_tab/commit/085f4cbf9848241510b5032d1b330889f6de6596 · Nota
• https://github.com/ayacoo/redirect_tab · Nota
• https://twitter.com/CVEnew/status/2033994289890660749 · Publicação no Twitter
• https://typo3.org/security/advisory/typo3-ext-sa-2026-006 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-755r-r738-mjgp · Aviso do Fabricante
• https://twitter.com/CVEarity/status/2033955949942366685 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4202 · Nota de Segurança