Robin-Van-De-Merghel

**Name of the Vulnerable Software and Affected Versions** DiracX-Web versions prior to 0.1.0-a8 **Description** DiracX-Web is a web application that provides an interface to interact with the DiracX services. An attacker can forge a request to redirect an authenticated user to an arbitrary website. The application’s `redirect` field on the login page is not verified and is susceptible to parameter pollution, allowing an attacker to hide a malicious URI. This could be used for phishing and credential theft. **Recommendations** Update to version 0.1.0-a8 or later.