Description
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- PlaceOS 1.2109.1 - Open Redirection http/cves/2021/CVE-2021-41826.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.