e621ng before 26.09.16 Open Redirect via URL Parameters
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and controller navigation links, allowing attackers to redirect pagination and navigation controls to attacker-controlled origins. Attackers can supply host, protocol, and port query parameters that are interpreted as URL generation options, causing pagination links to point to malicious domains while the initial page loads from the legitimate site.
CVE-2026-95813
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-95813
e621ng
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/e621ng/e621ng",
"vendor": "e621ng",
"product": "e621ng",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "26.09.16",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "26.09.16",
"versionType": "custom"
}
],
"packageURL": "pkg:github/e621ng/e621ng",
"collectionURL": "https://github.com/e621ng/e621ng",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-95813
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #2343 · Revision 1
- Added to Heist Feed
- Publisher date