CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- snap one ovrc cloud, snapone orvc +1 moreDevices using Snap One OvrC cloud are sent to a web address when...7.1 High
- xwiki, xwiki xwiki-platform +1 moreURL Redirection to Untrusted Site in XWiki4.7 Medium
- esri portal for arcgisBUG-000155001 - Unvalidated redirect in Portal for ArcGIS.6.1 Medium
- typechoOpen redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.6.1 Medium
- tauriTauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites4.8 Medium
- fortinet fortinac, fortinac-f +1 moreA URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F...3.9 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10...5.4 Medium
- mattermost, mattermost desktop +1 moreUnrestricted navigation due to unvalidated mattermost server redirection5.4 Medium
- woocommerce icons for featuresIcons for Features Plugin class-icons-for-features-admin.php redirect3.5 Low
- silverstripe framework, silverstripe-framework +1 moreSilverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen5.4 Medium
- thethingsnetwork lorawan-stacklorawan-stack has open redirect vulnerability6.1 Medium
- freshworks freshdeskFreshdesk Plugin redirect6.3 Medium
- servicenowThere exists an open redirect within the response list update functionality of ServiceNow. This...5.5 Medium
- xwiki, xwiki xwiki-platform +1 moreURL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore4.7 Medium
- mozilla firefox, firefox for android, focus +2 more +4 moreUsing a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to...6.1 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.1 Medium
- fortinet fortios, fortiproxy +1 moreA url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7...4.1 Medium
- dell streaming data platformDell Streaming Data Platform prior to 1.4 contains Open Redirect vulnerability. An attacker with...6.1 Medium
- samsung galaxy s21, galaxy s21 firmware +1 moreThis vulnerability allows local attackers to execute arbitrary code on affected installations of...3.9 Low
- lambdaisland uri`authority-regex` returns the wrong authority in lambdaisland/uri5.4 Medium
- huawei emui, harmonyos +1 moreThe BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this...7.4 High
- arno0x twofactorauthArno0x TwoFactorAuth login.php redirect3.5 Low
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass5.4 Medium
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Uncontrolled URL Redirect4.3 Medium
- joomunited wp meta seoWP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect6.1 Medium
- hewlett packard enterprise (hpe) hpe flexfabric 5700 switch series, hpe flexfabric 5700 40xg 2qsfp\+ firmware, flexfabric 5700 48g 4xg 2qsfp\+ firmware +2 morePotential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series....5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Webview2 Spoofing Vulnerability8.2 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +4 more +6 moreMicrosoft SharePoint Server Spoofing Vulnerability3.1 Low
- gitlab dast, dynamic application security testing analyzer +1 moreAn issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47...5.0 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8...4.3 Medium
- sigb pmbPMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css...6.1 Medium
- ualberta neosdiscoveryualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing5.5 Medium
- web2pyOpen redirect in web2py6.1 Medium
- artesãos seotools, seotool project seotool +1 moreArtesãos SEOTools TwitterCards.php eachValue redirect5.5 Medium
- artesãos seotools, seotool project seotool +1 moreArtesãos SEOTools SEOMeta.php setTitle redirect5.5 Medium
- artesãos seotools, seotool project seotool +1 moreArtesãos SEOTools OpenGraph.php makeTag redirect5.5 Medium
- corednscoreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints6.1 Medium
- keycloak, redhat keycloak node.js adapter, single sign-on +2 morekeycloak-connect contains Open redirect vulnerability in the Node.js adapter6.1 Medium
- opencatsAn open redirect vulnerability exposes OpenCATS to template injection due to improper validation...5.4 Medium
- genetechsolutions pie register, unknown registration forms +1 morePie Register < 3.8.2.3 - Open Redirect5.4 Medium
- Show moreLoading…