Threats tagged 'ghsa-jfvq-5hhp-qcqf'

Milk admin versions up to and including 0.9.8 contain a vulnerability in the redirect parameter that allows remote attackers with high privileges to redirect users to arbitrary external URLs via crafted requests. This is a form of open redirect vulnerability classified under CWE-601. The vulnerability does not impact confidentiality or integrity but can cause availability issues. No patch or official fix information is currently available.