CVE-2026-3049 | horilla-opensource horilla up to 1.0.2 Query Parameter global_search.py get prev_url redirect

A vulnerability labeled as problematic has been found in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_search.py of the component Query Parameter Handler. The manipulation of the argument prev_url results in open redirect.

This vulnerability is identified as CVE-2026-3049. The attack can be executed remotely. Additionally, an exploit exists.

The affected component should be upgraded.