CVE-2026-34847

MEDIUM

hoppscotch: Open redirect via `/enter?redirect=`

Title source: cna

Description

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, the /enter page contains a DOM-based open redirect vulnerability. The redirect query parameter is directly used to construct a URL and redirect the user without proper validation. This issue has been patched in version 2026.3.0.

References (2)

Scores

CVSS v3 4.7
EPSS 0.0003
EPSS Percentile 8.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Details

CWE
CWE-601
Status published
Products (1)
hoppscotch/hoppscotch < 2026.3.0 (2 CPE variants)
Published Apr 02, 2026
Tracked Since Apr 03, 2026