CVE-2026-41513CWE-601

Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints

Medium · published May 12, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker to turn trusted application links into phishing or social-engineering redirects.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-05-12T16:43Z
EPSS history
Timeline
  • 12 MAY 16:43Z
    Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints
    cvelistv5