CVE-2019-1010290

Babel Open Redirect (CVE-2019-1010290) affects the redirect.php component via the newurl parameter. The vulnerability allows redirection to an attacker-supplied URL, enabling an attacker-controlled redirect when a user follows a crafted link. The attack vector requires user interaction (visiting ...