A vulnerability classified as problematic was found in hs-web hsweb-framework up to 5.0.1. This affects the function
OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in open redirect.
This vulnerability is identified as CVE-2026-11477. The attack can be executed remotely. Additionally, an exploit exists.
Applying a patch is advised to resolve this issue.
