PT-2024-33493 · Umbrel · Umbrel

Name of the Vulnerable Software and Affected Versions: Umbrel versions prior to 1.2.2 Description: The login functionality of Umbrel contains a reflected cross-site scripting XSS vulnerability in use-auth.tsx. An attacker can specify a malicious redirect query parameter to trigger the...