EUVD-2026-124875

The MISP Modules website component contains an open redirect vulnerability in its login endpoint. The /login route accepted a user-supplied next query parameter and passed it directly to Flask's redirect function without validating the destination. An attacker could craft a URL such as...