References https://www.twcert.org.tw/tw/cp-132-8043-cc323-1.html https://www.twcert.org.tw/newepaper/cp-151-8043-cc323-3.html https://www.twcert.org.tw/tw/lp-132-1-12-20.html https://lis.mcut.edu.tw/p/406-1013-74556,r1533.php?Lang=zh-tw https://tp2rc.tanet.edu.tw/node/1135 https://www.tcrc.edu.tw/new/new-list/webitr-2 https://nkhhs.kmhjh.kh.edu.tw/files/15-1000-10485,c322-1.php?Lang=zh-tw
Related VulnerabilitiesPoCCVE-2026-64849: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect BypassPoCbentoml-open-redirect: BentoML v1.3.9 - Open RedirectPoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open RedirectPoCCVE-2021-45328: Gitea < 1.4.3 - Open RedirectPoCCVE-2023-49438: Python Flask-Security-Too <=5.3.2 - Open RedirectPoCCVE-2026-34847: Hoppscotch <= 2026.2.1 - Open RedirectPoCgitea-open-redirect-bypass: Gitea < 1.21.0 - Open RedirectPoCCVE-2026-6203: User Registration & Membership WordPress plugin - Open RedirectPoCodoo-login-redirect: Reflected Odoo - Open RedirectPoCCVE-2024-57241: DedeCMS - Open Redirect via download.phpPoCCVE-2025-50578: Heimdall - Host Header Injection & Open RedirectPoCCVE-2025-54793: Astro SSR - Open RedirectPoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header