Threats Tagged 'ghsa-5w25-6xp6-x3fm'

CVE-2026-93649 is a high-severity vulnerability in the Eclipse Foundation Adoptium Temurin website. The issue arises from improper validation of a redirect URL on the post-download page, which uses a naive string prefix check vulnerable to bypass via dot-segment normalization. This allows an attacker to craft a URL that appears to redirect to a trusted domain but actually leads to an attacker-controlled location, causing users to unknowingly download malicious binaries.