CVEvulnerability
CVE-2026-100523
5.1 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-09-26
- Last modified
- 2026-10-05
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.1 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-601
Description
Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect parameter without domain validation. Unauthenticated attackers can craft malicious links with encoded external URLs to redirect users to arbitrary sites via meta refresh tags for phishing attacks.
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://github.com/Cotonti/Cotonti github.com
- https://github.com/Cotonti/Cotonti/blob/1.0.0/message.php github.com
- https://github.com/Cotonti/Cotonti/blob/1.0.0/system/common.php github.com
- https://github.com/Cotonti/Cotonti/issues/1907 github.com
- https://github.com/Cotonti/Cotonti/pull/1908 github.com
- https://www.vulncheck.com/advisories/cotonti-through-1.0.0-open-redirect-via-message-php-redirect-parameter www.vulncheck.com