CVE-2026-4202CWE-200CWE-862

Broken Access Control in extension "Redirect Tab"

Low · published March 17, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00281 · 19.5th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-862 · Missing Authorization
Published
2026-03-17T08:33Z
EPSS history
Timeline
  • 17 MAR 08:33Z
    Broken Access Control in extension "Redirect Tab"
    cvelistv5