VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 17, 2026· Updated Apr 25, 2026

CVE-2026-4202

CVE-2026-4202

Description

The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ayacoo/redirect-tabPackagist
< 2.1.22.1.2
ayacoo/redirect-tabPackagist
>= 3.0.0, < 3.1.73.1.7
ayacoo/redirect-tabPackagist
>= 4.0.0, < 4.0.54.0.5

Affected products

1

Patches

1
085f4cbf9848

[SECURITY] Ensure only allowed users can view redirects

https://github.com/ayacoo/redirect_tabGuido SchmechelMar 16, 2026via ghsa
commit
1 file changed · +1 −1
  • Classes/UserFunctions/RedirectAccessDisplayCondition.php+1 −1 modified
    @@ -8,7 +8,7 @@
 
 class RedirectAccessDisplayCondition
 {
-    private const string TABLE_NAME = 'sys_redirect';
+    private const TABLE_NAME = 'sys_redirect';
 
     public function canListRedirects(): bool
     {

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.