Open Redirect in Milk admin redirect parameter

Successful exploitation allows remote attackers to redirect users from a legitimate Milk admin instance to arbitrary external destinations. The primary security impact is facilitation of phishing, credential harvesting, social engineering, and delivery of malicious content under the appearance of a trusted workflow. The vulnerability does not by itself indicate server-side code execution or privilege escalation, but it can materially increase the effectiveness of follow-on attacks against users.

Until a fixed version is deployed, restrict redirect behavior to relative internal paths only, or enforce a strict allowlist of permitted redirect destinations. Add server-side validation to block absolute external URLs and untrusted schemes. Where possible, present an interstitial warning before leaving the application context, and monitor for suspicious requests that abuse redirect functionality.

Upgrade Milk admin to a version newer than 0.9.8 that corrects validation and handling of the redirect parameter. The fix should ensure redirects are restricted to trusted internal paths or an explicit allowlist of approved destinations, and should reject or sanitize attacker-supplied external URLs.