An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites.
[
{
"product": "LabKey Server Community Edition",
"vendor": "Tenable",
"versions": [
{
"status": "affected",
"version": "Versions before 18.3.0-61806.763"
}
]
}
]