CVE-2026-124505

A flaw in Dianping CAT versions 3.0.0/3.1.0/4.0-RC1 allows for an open redirect vulnerability. The issue resides in the Handler.redirect function within the Handler.java file of the Login/Logout component. By manipulating the rtnUrl argument, a remote attacker can redirect users to an unintended ...