{"id":"CVE-2026-55185","sourceIdentifier":"security-advisories@github.com","published":"2026-08-21T21:17:00.563","lastModified":"2026-10-12T16:10:00.220","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Miniflux 2 is an open source feed reader. Prior to 2.3.1, IsRelativePath in internal/urllib/url.go accepts redirect targets containing backslashes because Go URL parsing treats them as path characters. Browser backslash normalization converts them to forward slashes. An unauthenticated attacker can provide such a redirect_url value to the login flow, bypass the relative-path and host checks, and redirect a victim to an attacker-controlled external site. This issue is fixed in version 2.3.1."},{"lang":"es","value":"Miniflux 2 es un lector de feeds de código abierto. Antes de la versión 2.3.1, IsRelativePath en internal/urllib/url.go acepta objetivos de redirección que contienen barras invertidas porque el análisis de URL de Go las trata como caracteres de ruta. La normalización de barras invertidas del navegador las convierte en barras diagonales. Un atacante no autenticado puede proporcionar un valor de redirect_url de este tipo al flujo de inicio de sesión, eludir las comprobaciones de ruta relativa y de host, y redirigir a una víctima a un sitio externo controlado por el atacante. Este problema se solucionó en la versión 2.3.1."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"miniflux","product":"v2","versions":[{"version":"< 2.3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-24T19:46:24.951438Z","id":"CVE-2026-55185","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"references":[{"url":"https://github.com/miniflux/v2/commit/c896bafdaa19c3f280b02b1059f84706495f1949","source":"security-advisories@github.com"},{"url":"https://github.com/miniflux/v2/pull/4362","source":"security-advisories@github.com"},{"url":"https://github.com/miniflux/v2/releases/tag/2.3.1","source":"security-advisories@github.com"},{"url":"https://github.com/miniflux/v2/security/advisories/GHSA-m999-j542-5w3r","source":"security-advisories@github.com"},{"url":"https://github.com/miniflux/v2/security/advisories/GHSA-m999-j542-5w3r","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}