CVE-2026-90453 — Open Redirect in Malcolm
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application…
Published: 2026-09-11 · CVSS: 5.1 · CVSS 4.0
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that causes another user's browser to be redirected to an arbitrary external destination after completing an upload.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7