CVE-2026-78377
URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS probability
- 0.18%
- CWE
- CWE-601
- Published
- 2026-09-09
- Last modified
- 2026-09-09
Affected products
- Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program
Weakness type
Related vulnerabilities
- CVE-2026-88887 — Renovate before 44.11.2 Credential Exfiltration via Link Header
- CVE-2026-88882 — Renovate before 44.11.2 Credential Exfiltration via Link Header
- CVE-2026-88881 — Renovate before 44.11.3 Credential Exfiltration via Link Header
- CVE-2026-88880 — Renovate before 44.11.3 Credential Exfiltration via Link Header
- CVE-2026-8323 — Open Redirect in Armiya Information Technologies' Access Control System
- CVE-2026-86756 — Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState
- CVE-2026-84389 — A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0...
- CVE-2026-86351 — MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL