CVE-2026-35404

creationtimestamp| type| source ---|---|--- 2026-04-06 22:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubkm6pny2g...

CVE-2026-35404

Open edX Platform is affected by CVE-2026-35404 due to an unvalidated redirect_url parameter in the view_survey endpoint. The parameter is passed directly to HttpResponseRedirect(), causing a 302 redirect when a non-existent survey name is requested. The same unvalidated URL is also returned in a...