CLEANSTART-2026-SX18288: UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns

Q: Who is exposed to this issue?

Deployments of the cleanstart/rundeck package are exposed if UrlHandlerFilter is configured with very broadly matching patterns. The provided information does not identify specific affected versions.

Q: What does an attacker need to exploit it?

The vector is network-based and requires no privileges, but user interaction is required. Exploitation depends on the presence of a broadly matching UrlHandlerFilter configuration.

Q: Are default configurations known to be affected?

The available information only identifies risk when UrlHandlerFilter uses very broadly matching patterns. It does not state whether the default configuration includes such patterns.

Published Nov 11, 2026

Updated

Security vulnerability affects the rundeck package. UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns.

Affected Software

2 affected componentsFixes available

cleanstart/rundeck<6.3.0-r0

6.3.0-r0

cleanstart/rundeck<6.1.0-r4

6.1.0-r4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.3.0-r0
Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.1.0-r4

Event History

Nov 11, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-47883

Frequently Asked Questions

Who is exposed to this issue?

Deployments of the cleanstart/rundeck package are exposed if UrlHandlerFilter is configured with very broadly matching patterns. The provided information does not identify specific affected versions.

What does an attacker need to exploit it?

The vector is network-based and requires no privileges, but user interaction is required. Exploitation depends on the presence of a broadly matching UrlHandlerFilter configuration.

Are default configurations known to be affected?

The available information only identifies risk when UrlHandlerFilter uses very broadly matching patterns. It does not state whether the default configuration includes such patterns.

CLEANSTART-2026-SX18288: UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are default configurations known to be affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are default configurations known to be affected?