The MISP Modules website component has an open redirect vulnerability in its login endpoint. The /login route accepts a user-supplied 'next' parameter and redirects users without validating the destination URL. This can be exploited by attackers to redirect users to malicious sites after login, facilitating phishing attacks. The vulnerability requires user interaction and successful login but no prior authentication or special attacker configuration. No specific affected versions or patch information are provided.