CVE-2026-120636 | LEEJO CGI up to 4.x URL Generation lib/CGI.pm url/start_form REQUEST_URI redirect

November 4, 2026 Yanac

A vulnerability identified as problematic has been detected in LEEJO CGI up to 4.x. Affected by this issue is the function url/start_form of the file lib/CGI.pm of the component URL Generation. This manipulation of the argument REQUEST_URI causes open redirect.

This vulnerability is registered as CVE-2026-120636. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More