Icinga Web 2 Open Redirect Vulnerability

An open redirect vulnerability has been identified in Icinga Web 2 versions prior to 2.11.5 and 2.12.2. This vulnerability allows an attacker to create a URL that, when clicked by an authenticated user, redirects them to a location of the attacker's choosing. The issue arises from improper handling of URL redirection in the backend.

Impact

Exploitation of this vulnerability allows for open redirection, where users can be sent to any external location, potentially leading to phishing attacks or other malicious activities.

Remediation

Users are advised to upgrade to Icinga Web 2 versions 2.11.5 or 2.12.3, both of which address this vulnerability.