Frédéric Goossens

**Name of the Vulnerable Software and Affected Versions** SolarWinds Observability Self-Hosted (affected versions not specified) **Description** SolarWinds Observability Self-Hosted is affected by an open redirection issue. The application does not properly sanitize URLs, allowing an attacker to redirect a user to a malicious website. Successful exploitation requires authentication and is considered to have high complexity. This could be used for lateral phishing after a system has been compromised. The vulnerable component is the URL handling mechanism. The attack involves manipulating the URL string. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.