SearchSubscribe

TRA-2026-33

Open redirect in OAuth consent screen

The return parameter accepts any host after a lax prefix check, enabling convincing phishing through a trusted domain.

  • Patched
  • Web applications

CVSS 3.1 base score

3.1low

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Vendor
Brightdesk
Product
Brightdesk Identity
CVE
  • CVE-2026-31055
Disclosure
90 days
Researchers
Amira Haddad

Score breakdown

Exploitability

Attack vector
Attack complexity
Privileges required
User interaction

Scope

Scope

Impact

Confidentiality
Integrity
Availability

Affected products

ProductAffectedFixed in
Brightdesk IdentityService, before 2026-06-10Service update 2026-06-10

Questions about this advisory

research@tenable.com
On this page6 sections
  1. Score breakdown
  2. Affected products
  3. Synopsis
  4. Proof of concept
  5. Solution
  6. Disclosure timeline

Synopsis

The return parameter accepts any host after a lax prefix check, enabling convincing phishing through a trusted domain.

Proof of concept

Tenable has shared a proof of concept with Brightdesk. It is not published here, to give operators time to apply the fix.

Solution

Fixed server-side; no customer action is required.

Disclosure timeline

  1. Tenable reports the issue to Brightdesk

  2. TRA-2026-33 published

90 days from report to publication, against a 90-day policy.How we disclose