CVE-2021-21377

CVE-2021-21377 is an open redirect vulnerability affecting OMERO.web, an open-source Django-based software for managing microscopy imaging, in versions prior to 5.9.0. This flaw allows an attacker to redirect users to untrusted external sites after login or group context switching due to a lack of URL validation. With a CVSS score of 5.4 (Medium), this vulnerability has a network attack vector, low attack complexity, and requires user interaction, potentially leading to information disclosure and integrity impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.