CVE-2026-55840 | Erudika Scoold up to 1.69.0 URL Validation HttpUtils.java getBackToUrl backto/returnto redirect

October 15, 2026 Yanac

A vulnerability classified as problematic has been found in Erudika Scoold up to 1.69.0. This vulnerability affects the function getBackToUrl of the file src/main/java/com/erudika/scoold/utils/HttpUtils.java of the component URL Validation. The manipulation of the argument backto/returnto leads to open redirect.

This vulnerability is uniquely identified as CVE-2026-55840. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More