medium4.3
CVE-2026-4202
Broken Access Control in extension "Redirect Tab" (redirect_tab)
Impact
The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | ayacoo/redirect-tab | < 2.1.2 | 2.1.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ayacoo | Redirect Tab | before 2.1.2 from 3.0.0 before 3.1.7 from 4.0.0 before 4.0.5 |