THREAT OPS › Threat News › [NVD] CVE-2026-53683 (MEDIUM 4.3) — reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect use
[NVD] CVE-2026-53683 (MEDIUM 4.3) — reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect use
CVE-2026-53683 CVSS: 4.3 MEDIUM Published: 2026-09-02T09:16:38.247
reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary external site after completion of
Indicators of compromise
- CVE-2026-53683cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53683