From cd9c51ce63ac3f84f7d6fd0bf0c1a3d4fdcf59cd Mon Sep 17 00:00:00 2001
From: amandeep sharma qlo <amandeepsharma.qlo548@webkul.in>
Date: Thu, 6 Nov 2025 21:09:34 +0530
Subject: [PATCH] [Fix]: Open Redirection

---
 classes/controller/AdminController.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/classes/controller/AdminController.php b/classes/controller/AdminController.php
index 67d88e69a..cf38cfc5b 100644
--- a/classes/controller/AdminController.php
+++ b/classes/controller/AdminController.php
@@ -1417,8 +1417,8 @@ class AdminControllerCore extends Controller
                     } elseif ($this->postImage($object->id) && !count($this->errors) && $this->_redirect) {
                         $parent_id = (int)Tools::getValue('id_parent', 1);
                         // Specific back redirect
-                        if ($back = Tools::getValue('back')) {
-                            $this->redirect_after = urldecode($back).'&conf=4';
+                        if (($back = Tools::secureReferrer(Tools::getValue('back'))) && $back != __PS_BASE_URI__) {
+                                $this->redirect_after=urldecode($back).'&conf=4';
                         }
                         // Specific scene feature
                         // @todo change stay_here submit name (not clear for redirect to scene ... )