MEDIUM4.3

GHSA-755r-r738-mjgp

Broken Access Control in extension "Redirect Tab" (redirect_tab)

Quick fix

GHSA-755r-r738-mjgp — ayacoo/redirect-tab: upgrade to the fixed version with the command below.

composer require ayacoo/redirect-tab:^2.1.2

Details

The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/ayacoo/redirect-tab

Introduced in: 0Fixed in: 2.1.2

Fixcomposer require ayacoo/redirect-tab:^2.1.2

Packagist/ayacoo/redirect-tab

Introduced in: 3.0.0Fixed in: 3.1.7

Fixcomposer require ayacoo/redirect-tab:^3.1.7

Packagist/ayacoo/redirect-tab

Introduced in: 4.0.0Fixed in: 4.0.5

Fixcomposer require ayacoo/redirect-tab:^4.0.5

References

https://nvd.nist.gov/vuln/detail/CVE-2026-4202[ADVISORY]
https://github.com/ayacoo/redirect_tab/commit/085f4cbf9848241510b5032d1b330889f6de6596[WEB]
https://github.com/ayacoo/redirect_tab[PACKAGE]
https://typo3.org/security/advisory/typo3-ext-sa-2026-006[WEB]