CVE-2019-1010290: Babel: Multilingual site Babel All is affected by: Open Redirection.

Security readout for executives and security teams

CVE-2019-1010290 is an open redirect in the Babel multilingual site component. A crafted link on a legitimate site using Babel can send a visitor to an attacker-chosen destination. The main business risk is phishing and trust abuse, not direct server compromise based on the provided sources. Exposure is most likely on public CMS Made Simple sites using the Babel multilingual module where redirect.php is reachable. The bundle says all Babel versions are affected, but it does not provide CPEs or version ranges beyond that. Treat this as a phishing-enablement risk. Prioritize internet-facing sites and brands with high customer trust. It is not described as server takeover, but it can make malicious links appear to originate from your domain. Mitigation focus: Check vendor and CMS Made Simple project guidance for Babel updates or removal guidance.; Disable or restrict access to redirect.php if it is not required.; Validate redirect destinations against approved local or trusted destinations..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.