Threats affecting pkg:github/icinga/icingaweb2

Icinga Web 2 versions prior to 2.12.7 and 2.13.1 contain an open redirect vulnerability (CWE-601). An attacker can craft a URL that, when visited by an authenticated user whose locale is not en_US, causes the backend to redirect the user to an arbitrary location. This vulnerability has been fixed in versions 2.12.7 and 2.13.1.