An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.
History

Thu, 30 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Giuliopanda
Giuliopanda milk Admin
Vendors & Products Giuliopanda
Giuliopanda milk Admin

Tue, 28 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Milk Admin Open Redirect Vulnerability Allowing Arbitrary External URL Redirection
Weaknesses CWE-601

Mon, 27 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
Description An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-07-27T00:00:00.000Z

Updated: 2026-07-28T16:03:30.459Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-51564

cve-icon Vulnrichment

Updated: 2026-07-28T16:03:26.028Z

cve-icon NVD

No data.

cve-icon Redhat

No data.