CVE-2026-3049: horilla-opensource horilla Query Parameter global_search.py get redirect
A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horillagenerics/globalsearch.py of the component Query Parameter Handler. The manipulation of the argument prevurl results in open redirect. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 1.0.3 is capable of addressing this issue. The patch is identified as 730b5a44ff060916780c44a4bdbc8ced70a2cd27. The affected component should be upgraded.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3049?
CVE-2026-3049 has been classified with a moderate severity level due to its potential impact on application security.
How do I fix CVE-2026-3049?
To fix CVE-2026-3049, upgrade the horilla-opensource horilla application to version 1.0.3 or later.
What component is affected by CVE-2026-3049?
CVE-2026-3049 affects the Query Parameter Handler in the global_search.py file of the horilla-opensource horilla application.
What versions of horilla are vulnerable to CVE-2026-3049?
Versions up to and including 1.0.2 of horilla-opensource horilla are vulnerable to CVE-2026-3049.
What type of vulnerability is CVE-2026-3049?
CVE-2026-3049 is a vulnerability related to improper handling of query parameters, which can lead to security risks.