EIP-2026-110012

The exploit demonstrates an open redirect vulnerability in ocPortal by crafting a malicious URL that redirects users to an arbitrary domain. The vulnerability arises due to insufficient input sanitization of the 'redirect' parameter in the login page.