low3.5
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it again…
Impact
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that causes another user's browser to be redirected to an arbitrary external destination after completing an upload.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.