Open Redirect in Typo3 Cms

CVE-2026-47347

Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned sanitization checks. This enables attackers to redirect users…

Vulnerability class: Open Redirect

EPSS: 0.003 (21.7th percentile) — read the EPSS interpretation.