Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_search.py of the component Query Parameter Handler. The manipulation of the argument prev_url results in open redirect. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 1.0.3 is capable of addressing this issue. The patch is identified as 730b5a44ff060916780c44a4bdbc8ced70a2cd27. The affected component should be upgraded.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3049 A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_search.py of the compone… https://www.cve.org/CVERecord?id=CVE-2026-3049
Post summary
A vulnerability (CVE-2026-3049) was identified in horilla‑opensource horilla up to version 1.0.2, affecting the get function in horilla_generics/global_search.py.
CVE-2026-3049 Open Redirect Vulnerability in Horilla Opensource Up to Version 1.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3049
Post summary
A new open redirect vulnerability (CVE-2026-3049) affecting Horilla Open Source up to version 1.0.2 has been disclosed, with details available on Vulmon.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | horilla | horilla | - | - | - |