CVE-2026-34847CWE-601

hoppscotch: Open redirect via `/enter?redirect=`

Medium · published April 2, 2026

CVSS v3.1
4.7
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, the /enter page contains a DOM-based open redirect vulnerability. The redirect query parameter is directly used to construct a URL and redirect the user without proper validation. This issue has been patched in version 2026.3.0.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-04-02T19:19Z
EPSS history
Timeline
  • 02 APR 19:19Z
    hoppscotch: Open redirect via `/enter?redirect=`
    cvelistv5