CVE-2026-51954

Published: Ott 22, 2026 Last Modified: Ott 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.

https://github.com/Envincion/CVE-2026-51954
https://github.com/Envincion/CVE-2026-51954
https://github.com/webasyst/webasyst-framework/issues/389
https://github.com/webasyst/webasyst-framework/issues/389
https://support.webasyst.com/forum/48658/unvalidated-redire…
https://support.webasyst.com/forum/48658/unvalidated-redirect_uri-in-oauth-auth…