{"id":"CVE-2026-109160","state":"PUBLISHED","title":"PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect","description":"A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the argument returnUrl can lead to open redirect. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-10-13T11:00:14.244Z","updatedAt":"2026-10-16T17:17:24.257Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["n/a PublicCMS"],"affected":[{"vendor":"n/a","product":"PublicCMS","versions":[{"version":"5.202608.a","status":"affected"}],"cpes":["cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*"],"modules":["pay Endpoint"]}],"references":["https://vuldb.com/vuln/416891","https://vuldb.com/vuln/416891/cti","https://vuldb.com/cve/CVE-2026-109160","https://vuldb.com/submit/979787"],"weaknesses":["CWE-601"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/109xxx/CVE-2026-109160.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-109160","state":"PUBLISHED","datePublished":"2026-10-13T11:00:14.244Z","dateUpdated":"2026-10-16T17:17:24.257Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-10-12T12:10:20.836Z"},"containers":{"cna":{"title":"PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect","descriptions":[{"lang":"en","value":"A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the argument returnUrl can lead to open redirect. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"n/a","product":"PublicCMS","versions":[{"version":"5.202608.a","status":"affected"}],"cpes":["cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*"],"modules":["pay Endpoint"]}],"references":[{"url":"https://vuldb.com/vuln/416891","name":"VDB-416891 | PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/416891/cti","name":"VDB-416891 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-109160","name":"CVE-2026-109160 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/979787","name":"Submit #979787 | PublicCMS V5 (V5.202608.a and earlier); V4.0 line also supported open redirect (CWE-601)","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-601","type":"CWE","lang":"en","description":"Open Redirect"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-10-13T11:00:14.244Z"},"timeline":[{"time":"2026-10-12T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-10-12T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-12T14:15:26.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"lucasg2g (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202610"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-16T16:46:48.724662Z","id":"CVE-2026-109160","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-16T17:17:24.257Z"}}]}}}