PT-2026-136066

CVE-2026-120327

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

CVSS 4.0
5.3
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')
Related identifiers
CVE-2026-120327
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com