CVE-2026-4202 Details
Description
The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.
A broken access control vulnerability has been identified in the TYPO3 extension 'Redirect Tab' (redirect_tab), specifically in versions 4.0.0 to 4.0.4, 3.0.0 to 3.1.6, and 2.1.1 and below. The vulnerability arises because the extension does not properly verify whether an authenticated user has the necessary permissions to access redirect records. This lack of verification can lead to unauthorized exposure of redirect information when a page is being edited.
Users of the 'Redirect Tab' extension are advised to update to version 4.0.5, 3.1.7, or 2.1.2. These versions are available through the TYPO3 Extension Manager, Packagist, and can be downloaded directly from the TYPO3 Extensions Repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://typo3.org/security/advisory/typo3-ext-sa-2026-006 | TYPO3 | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | TYPO3 |
| CWE-862 | Missing Authorization | TYPO3 |
Affected Products
| Product | Versions |
|---|---|
| ayacoo redirect tab | < 2.1.2 >= 3.0.0, < 3.1.7 >= 4.0.0, < 4.0.5 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | TYPO3 |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 25, 2026 | Initial Analysis | [email protected] |
| Mar 17, 2026 | New CVE Received | TYPO3 |