GHSA-755r-r738-mjgpLowCVSS 4.3

Broken Access Control in extension "Redirect Tab" (redirect_tab)

Published
March 17, 2026
Last Modified
April 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-4202 →

📋 Description

The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.

🎯 Affected products3

  • composer/ayacoo/redirect-tab:< 2.1.2
  • composer/ayacoo/redirect-tab:>= 3.0.0, < 3.1.7
  • composer/ayacoo/redirect-tab:>= 4.0.0, < 4.0.5

🔗 References (4)