This vulnerability in teableio teable up to version 1.9.x allows remote attackers to perform cross-site scripting via manipulation of the redirect argument in the login page component. The affected code did not properly validate redirect URLs, enabling injection of malicious scripts. The vendor fixed the issue by implementing validation with isValidRedirectPath(), which blocks unsafe redirect schemes such as javascript:, data:, and cross-origin URLs. Users should upgrade to the fixed version (release.2026-04-21T08-57-20Z.1513) or the develop branch where the fix is applied.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected application’s login page, potentially leading to session hijacking, phishing, or other malicious actions. The vulnerability is remotely exploitable without privileges or user interaction beyond triggering the redirect. The CVSS score of 5.3 reflects a medium impact with low attack complexity and no required privileges.

Upgrade the affected teableio teable component to version release.2026-04-21T08-57-20Z.1513 or later, or use the develop branch where the fix is implemented. The fix validates the redirect parameter to prevent unsafe redirects and script injection. No other mitigation is indicated by the vendor advisory.