PT-2026-51159 · Cap Go · Cap-Go

Muhnabil04 · Publicado 2026-06-20 · Atualizado 2026-06-20 · CVE-2026-56332

Mitre

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmation url parameter is not validated, enabling attackers to craft malicious links for phishing and credential harvesting attacks.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2026-56332

Produtos afetados

Cap-Go

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-56332 · Nota de Segurança
• https://github.com/Cap-go/capgo/security/advisories/GHSA-24q8-ghqq-m8cj · Aviso do Fabricante
• https://vulncheck.com/advisories/capgo-open-redirect-via-confirmation-url-parameter · Nota