CVE-2026-66370
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-601
Redireccionamiento de URL a sitio no confiable (Open Redirect)
Fecha de publicación:
06/08/2026
Última modificación:
11/08/2026
Descripción
*** Pendiente de traducción *** URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction attributes on an element in sanitized HTML. HTML&#39;s form attribute associates an input with any form on the page by its id even when the input sits outside that form, and formaction on a submit control overrides the owning form&#39;s action. Neither attribute receives a scheme check, so an absolute cross-origin URL survives sanitizing.<br />
<br />
No script executes. The scrubber allows neither form nor button, so the attacker cannot introduce a form of their own and the rendering page must already contain a form carrying an id.<br />
<br />
This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.
Impacto
Puntuación base 4.0
4.80
Gravedad 4.0
MEDIA
Puntuación base 3.x
6.10
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:rrrene:htmlsanitizeex:*:*:*:*:*:*:*:* | 0.3.1 (incluyendo) | 1.5.3 (excluyendo) |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página