CVE-2026-90453

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description A file-upload handler redirects the authenticated client's browser to a URL sourced directly from the Referer header of the request without validating it against the application's own origin. This allows an authenticated attacker to craft a request that redirects another user's browser to an arbitrary external destination upon completion of a file upload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.