CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- moodleMoodle Arbitrary Redirect5.8 Medium
- cisco telepresence tc softwareOpen redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7...5.8 Medium
- drupal, debian linux +1 moreOpen redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before...6.1 Medium
- drupal, debian linux +1 moreOpen redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers...6.1 Medium
- serve-static project serve-staticOpen Redirect in serve-static4.3 Medium
- dnnsoftware dotnetnukeDotNetNuke (DNN) Open redirect vulnerability4.3 Medium
- plonePlone Multiple open redirect vulnerabilities5.8 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter6.5 Medium
- plonePlone Open Redirection vulnerability via next parameter5.8 Medium
- drupalDrupal has open redirect vulnerability in the Overlay module5.8 Medium
- apache sling, sling auth core component +1 moreApache Sling Auth Core bundle vulnerable to Open Redirection5.8 Medium
- typo3TYPO3 Open redirect vulnerability in the Access tracking mechanism6.4 Medium
- cloudbees jenkinsJenkins affected by Open Redirect Vulnerability5.8 Medium
- oracle fusion middlewareUnspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle...4.7 Medium
- moodleMoodle Open Redirect in Calendar Set Page4.9 Medium
- drupalDrupal Open Redirect5.8 Medium
- phpmyadminphpMyAdmin Open Redirect in redirector4.3 Medium
- moodleMoodle Open Redirect Via Error Messages5.8 Medium
- typo3TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in...5.4 Medium
- typo3TYPO3 Open Redirection vulnerability on the backend6.1 Medium
- dojotoolkit dojoDojo Open Redirect vulnerability4.3 Medium
- drupal, drupal drupal6, debian linux +2 moredrupal6 version 6.16 has open redirection6.1 Medium
- opera browserOpera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own...5.8 Medium
- microsoft exchange serverOpen redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for...4.3 Medium
- joomlaJoomla! Open Redirect vulnerability5.8 Medium
- edgewall trac, fedoraproject fedora +1 moreTrac Open Redirect vulnerability6.1 Medium
- bitrix24 bitrix site managerOpen redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to...6.1 Medium
- blackboard academic suiteBlackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other...6.1 Medium
- opera browserThe XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access...7.5 High
- microsoft exchange serverMicrosoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect...5.8 Medium
- opera browserOpera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user...5.0 Medium