CVE-2026-12863CWE-601

Open redirect

Medium · published June 22, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-06-22T08:41Z
EPSS history
Timeline
  • 22 JUN 08:41Z
    Open redirect
    cvelistv5