GHSA-755r-r738-mjgp

ghsaUSosv

Broken Access Control in extension "Redirect Tab" (redirect_tab)

view advisory published 2026-03-17Licence: CC-BY-4.0

The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-4202US	medium4.3OT elevated	0.17% (6th)	—	2026-03-17
The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.

references

External citations — patches, advisories, analysis.

https://github.com/ayacoo/redirect_tabPACKAGE
https://github.com/ayacoo/redirect_tab/commit/085f4cbf9848241510b5032d1b330889f6de6596WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-4202ADVISORY
https://typo3.org/security/advisory/typo3-ext-sa-2026-006WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan