CVE-2026-55840

The Scoold Q&A and knowledge sharing platform is vulnerable to an Open Redirect in the getBackToUrl() method (located in src/main/java/com/erudika/scoold/utils/HttpUtils.java) in versions prior to 1.69.1 . The root cause is a bypass of the Strings.CI.startsWith check, where an attacker can provid...