CVE-2026-28413: Products.isurlinportal Open Redirect Vulnerability Due to Excessive Forward Slashes
Summary
CVE-2026-28413: Products.isurlinportal has possible open redirect when using more than 2 forward slashes. Affects products-isurlinportal across 3 version ranges.
< 2.1.0
>= 3.0.0, < 3.1.0
>= 4.0.0a1, < 4.0.0
Fixed in 2.1.0, 3.1.0 or 4.0.0, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Products.isurlinportal is a package used within the Plone content management system that facilitates user login and redirection functionalities. It is designed to manage user sessions and ensure secure access to content. However, due to its reliance on URL parameters for redirection, it is susceptible to manipulation, particularly when customizations or add-ons are implemented. This vulnerability arises when more than two forward slashes are used in the URL, potentially leading to unintended external redirects.
Vulnerability Detail
The vulnerability allows an attacker to exploit the login redirection mechanism by crafting a URL such as '/login?came_from=/////evil.example'. This could redirect users to an external site after they log in, which may lead to phishing attacks or other malicious activities. The issue is rooted in the way the Products.isurlinportal package handles URL validation, specifically when it encounters excessive forward slashes. While standard Plone installations are not affected, customized setups may be vulnerable.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 2.1.02.1.0pip install --upgrade "products-isurlinportal==2.1.0" -
>= 3.0.0, < 3.1.03.1.0pip install --upgrade "products-isurlinportal==3.1.0" -
>= 4.0.0a1, < 4.0.04.0.0pip install --upgrade "products-isurlinportal==4.0.0"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
Currently, there are no known workarounds for this vulnerability. The best course of action is to apply the necessary updates as outlined above.
Conclusion
CVE-2026-28413 represents a significant security risk for users of the Products.isurlinportal package, particularly those with customized configurations. It is essential to apply the recommended updates to mitigate the risk of open redirects and potential phishing attacks. Regular monitoring and security practices should also be employed to safeguard against such vulnerabilities.
See every vulnerability recorded for products-isurlinportal →
FAQ
CVE-2026-28413 is an open redirect vulnerability in the Products.isurlinportal package that can be exploited through URLs with excessive forward slashes.
Users of the Products.isurlinportal package, particularly those with customized login implementations, may be affected.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 5.3, indicating a moderate level of severity.
If you cannot upgrade your package, it is crucial to monitor your application for any suspicious activity and consider implementing additional security measures.
References
Related vulnerabilities
Recent vulnerabilities recorded for products-isurlinportal.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
