The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site.
CVSS 3.1MEDIUM 4.7·Network·No auth·User interaction·EPSS 0.00433·Published 2023-12-14·Fixed in 4.37.5CWE-601