PT-2026-65311 · Unknown · Milk Admin
CVE-2026-51564
·
Published
2026-07-27
·
Updated
2026-07-28
CVSS v3.1
4.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Milk admin versions 0.9.8 and earlier
Description
An issue exists where remote attackers can redirect users to arbitrary external URLs by sending a crafted request. This is caused by improper handling of the
redirect parameter.Recommendations
Update Milk admin to a version later than 0.9.8.
As a temporary mitigation, restrict or validate the input of the
redirect parameter to prevent unauthorized external redirections.Exploit
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Milk Admin