CVE-2024-58389

HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query parameter. BasicLoginHandler and PasswordLoginHandler store the parameter in a nexturl cookie, so crafted login link...

CVE-2026-106033

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...

CVE-2026-106033

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...

CVE-2026-106033: Improper Neutralization of Input During Web Page Generation

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...

PT-2026-106853

A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...

CVE-2025-61669: URL Redirection to Untrusted Site

Jupyter Server is the backend for Jupyter web applications. In jupyterserver versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in LoginFormHandler.redirectsafe, which allows redirects to arbitrary external domains via values such as ///example.com. An...

CVE-2023-23957 Open Redirection Vulnerability in Symantec Identity Portal 14.4

An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...

Symantec Identity Portal Input Validation Error Vulnerability

Symantec Identity Portal is an identity and access management from Symantec USA. A security vulnerability exists in Symantec Identity Portal version 14.4. An attacker could view and modify the value of the "next" query parameter...

CVE-2023-23957: URL Redirection to Untrusted Site

An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...

PT-2023-19323

Name of the Vulnerable Software and Affected Versions Symantec Identity Portal version 14.4 Description An authenticated user can see and modify the value for the next query parameter. Recommendations For Symantec Identity Portal version 14.4, consider restricting access to the next query paramet...