CVE-2026-71240
Received Received - Intake

Unauthenticated Redirect in DjangoCRM Toggle Default Sorting

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c

Description
DjangoCRM's toggle_default_sorting view is the only route in common/urls.py that is not wrapped in login_required or staff_member_required, and it redirects to a caller-supplied next_url GET parameter after only checking secure_url(next_url), which merely verifies the target host matches the current site's domain (blocking only cross-domain redirects) while allowing any same-site path with no authentication required to reach the view. This enables unauthenticated phishing redirects and referrer-based token leakage via redirect chains.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-05
Last Modified
2026-08-05
Generated
2026-08-05
AI Q&A
2026-08-05
EPSS Evaluated
N/A
NVD
CVE-2026-71240
EUVD
EUVD-2026-53313

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
django django_crm *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-601 The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

DjangoCRM's toggle_default_sorting view lacks authentication checks, allowing unauthenticated users to access it. It redirects users to a URL specified in the next_url parameter after only verifying the domain matches the current site, enabling phishing attacks and token leakage through redirect chains.

Detection Guidance

Check DjangoCRM's common/urls.py for the toggle_default_sorting view to confirm it lacks login_required or staff_member_required decorators. Inspect GET requests to this endpoint for unauthenticated access attempts or unusual redirect patterns in logs.

Impact Analysis

This vulnerability allows attackers to trick users into visiting malicious links, potentially stealing sensitive data or credentials. It can also expose session tokens or other sensitive information through referrer headers during redirect chains.

Mitigation Strategies

Wrap the toggle_default_sorting view in Django's login_required or staff_member_required decorator. Validate and sanitize the next_url parameter to prevent open redirect vulnerabilities. Monitor access logs for suspicious redirect attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71240. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart