CVE-2022-0692

Name of the Vulnerable Software and Affected Versions rudloff/alltube versions prior to 3.0.1

Description The issue allows an attacker to construct a URL that redirects to an arbitrary external domain. This is due to an open redirect vulnerability in releases prior to 3.0.1.

Recommendations For versions prior to 3.0.1, update to version 3.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable rudloff/alltube module to minimize the risk of exploitation.