CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- sap se s/4hana (manage catalog items and cross-catalog search), sap s\/4hana +1 moreURL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)6.1 Medium
- cisco hyperflex hx data platformA vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could...4.7 Medium
- cacti, fedoraproject fedora +1 moreOpen redirect in change password functionality in Cacti3.5 Low
- i-pro co., ltd. vi web client, i-pro video insight +1 moreOpen redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated...6.1 Medium
- startrinity softswitchStarTrinity Softswitch version 2023-02-16 – Open Redirect (CWE-601)8.8 High
- gitlabURL Redirection to Untrusted Site in GitLab2.6 Low
- jupyter server, jupyter-server jupyter server +1 moreOpen Redirect Vulnerability in jupyter-server4.3 Medium
- apache tomcat, debian linux +1 moreApache Tomcat: Open redirect with FORM authentication6.1 Medium
- openstack horizonHorizon Web Dashboard Open Redirect vulnerability6.1 Medium
- southrivertech titan ftp serverThere is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected...6.1 Medium
- arscode ninja popupsWordPress Ninja Popups Plugin <= 4.7.5 is vulnerable to Open Redirection4.7 Medium
- opnsenseAn open redirect in the Login page of OPNsense before 23.7 allows attackers to redirect a victim...6.1 Medium
- vound-software intella connectVound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.6.1 Medium
- cms project cmsFuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java.6.1 Medium
- cms project cmsFuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java.6.1 Medium
- icewarp server, mail server +1 moreOpen Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 ...6.1 Medium
- netdiscoNetdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker...6.1 Medium
- seeddmsSeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit...6.1 Medium
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access HTTP open redirect6.5 Medium
- hcl bigfix webuiURL redirection affects BigFix WebUI4.7 Medium
- livelyworks articartLivelyWorks Articart Base64 Encoding de_DE redirect3.5 Low
- elecom co.,ltd. wrh-300wh-h, wtc-300hwh, wtc-c1167gc-b +5 more +7 moreOpen redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters...6.1 Medium
- jenkins openshift login, jenkins project openshift login plugin +1 moreJenkins OpenShift Login Plugin vulnerable to Open Redirect6.1 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments, fossbilling +2 moreOpen Redirect in alextselegidis/easyappointments6.3 Medium
- yt-dlp, fedoraproject fedora, youtube-dlc project youtube-dlc +1 more +3 moreyt-dlp File Downloader cookie leak6.1 Medium
- novuNovu Open Redirect Vulnerability in Sign-In with GitHub Functionality5.4 Medium
- gitea, go-gitea go-gitea/gitea +1 moreOpen Redirect in go-gitea/gitea3.0 Low
- unknown protect wp adminProtect WP Admin < 4.0 - Unauthenticated Protection Bypass6.1 Medium
- brave browser, brave software browser android +1 moreAn Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in...6.1 Medium
- ericsson network managerEricsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST...4.8 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server vulnerable to open redirect on "Unsupported browser" warning4.1 Medium
- zscaler client connectorA URL parameter during login flow was vulnerable to injection. An attacker could insert a...8.2 High
- blogengine blogengine.netBlogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module6.1 Medium
- adobe experience manager, experience manager cloud service +1 moreOpen Redirect on AEM Target5.4 Medium
- zimbra collaborationAn open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite...6.1 Medium
- keystonejs keystone@keystone-6/auth Open Redirect vulnerability6.1 Medium
- createit ultimate gdpr \& ccpa compliance toolkit, createit-pl ultimate gdpr & ccpa compliance toolkit for wordpress +1 moreUltimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export7.5 High
- mozilla firefoxWhen choosing a site-isolated process for a document loaded from a data: URL that was the result...6.1 Medium
- canonical landscapeLandscape Open Redirect6.1 Medium
- woocommerce sidebar manager to woosidebars converterWooSidebars Sidebar Manager Converter Plugin class-woosidebars-sbm-converter.php process_request redirect4.3 Medium
- woocommerce woosidebarsWooSidebars Plugin class-woo-sidebars.php enable_custom_post_sidebars redirect4.3 Medium
- woocommerce wooframework tweaksWooFramework Tweaks Plugin wooframework-tweaks.php admin_screen_logic redirect3.5 Low
- accesspressthemes frontend post wordpress pluginFrontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect5.4 Medium
- woocommerce wooframework brandingWooFramework Branding Plugin wooframework-branding.php admin_screen_logic redirect4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible4.8 Medium
- joomla joomla\!, joomla! project cms +1 more[20230501] - Core - Open Redirect and XSS within the mfa select6.1 Medium
- vmware identity manager, workspace one access, cloud foundation +1 more +3 moreVMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect...6.1 Medium
- avaya ix workforce engagementAvaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- tornadoweb tornadoOpen redirect in Tornado6.1 Medium
- Show moreLoading…