The External Link Filter module provides an input filter that replaces external links by a local link that redirects to the target URL.
The module did not have protection for the Redirect URL to go where content authors intended.
{ "constraint": "<1.2.0" }
"<1.2.0"
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/elf/DRUPAL-CONTRIB-2019-063.json"