SB20260428186 - Open redirect in isURLInPortal
Published: April 28, 2026
Security Bulletin ID
SB20260428186
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Open redirect (CVE-ID: CVE-2026-28413)
The vulnerability allows a remote attacker to redirect users to an untrusted external website.
The vulnerability exists due to url redirection to an untrusted site in the login redirect handling in Products.isurlinportal when processing a crafted came_from parameter containing more than two forward slashes. A remote attacker can supply a specially crafted login URL to redirect users to an untrusted external website.
Only customized login flows, such as those modified by add-ons, are affected.
Remediation
Install update from vendor's website.