CVE-2026-120327Open Redirection in extension "Mail" (mail)

Beschreibung

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://typo3.org/security/advisory/typo3-ext-sa-2026-037 vendor-advisory