https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:31:27.128819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0637 CVE-2022-0637 2026-10-10T13:31:27.130616+00:00

Affected: mozilla/pollbot

open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6

 https://cve.radiocsirt.org/vuln/ghsa-vg27-hr3v-3cqv GHSA-vg27-hr3v-3cqv — open redirect in pollbot 2026-10-10T13:31:27.130666+00:00

Affected: PyPI: pollbot

(From https://bugzilla.mozilla.org/show_bug.cgi?id=1753838)

Summary: There was an open redirection vulnerability in the path of:

https://pollbot.services.mozilla.com/ and https://pollbot.stage.mozaws.net/

Description: An attacker can redirect anyone to malicious sites.

Steps To Reproduce: Type in this URL:

https://pollbot.services.mozilla.com/%0a/evil.com/

It redirects to that website

evil.com

evil.com was used as an example but this could be any website. Note, the /%0a/ and trailing / are required.

Supporting Material/References: https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html

Impact

Attackers can serve malicious websites that steal passwords or download ransomware to their victims machine due to a redirect and there are a heap of other attack vectors.