CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- pivotal software spring framework, spring framework, netapp active iq unified manager +2 moreCVE-2024-22243: Spring Framework URL Parsing with Host Validation8.1 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v031. A URL Redirection to an...5.4 Medium
- fit2cloud jumpserverJumpServer Open Redirect Vulnerability4.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20240202] - Core - Open redirect in installation application4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character6.1 Medium
- liferay dxp, digital experience platform +1 moreLiferay Vulnerable to Open Redirect via Adaptive Media Administration Page6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page6.1 Medium
- greenpau caddy-securityOpen Redirect in github.com/greenpau/caddy-security5.4 Medium
- darktrace threat visualizerDOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6...6.1 Medium
- smartcalc osticky, smartcalc.es osticky component for joomla +1 moreExtension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.86.1 Medium
- appleple a-blog cmsURL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a...4.7 Medium
- deconf analytics insights, unknown analytics insights for google analytics 4 (aiwp) +1 moreAnalytics Insights for Google Analytics 4 < 6.3 - Open Redirect6.1 Medium
- glewlwyd sso server project sso serverGlewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.6.1 Medium
- setorinformatica s.i.lSetor Informatica S.I.L version 3.0 is vulnerable to Open Redirect via the hprinter parameter,...6.1 Medium
- yzmcmsAn issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to...6.1 Medium
- pyloadpyLoad open redirect vulnerability due to improper validation of the is_safe_url function4.7 Medium
- mozilla firefox for ios, firefox mobile +1 moreWhen a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before...6.1 Medium
- rapid software llc scada, rapidscada rapid scada +1 moreOpen Redirect in Rapid SCADA5.4 Medium
- abhinavsingh wordpress toolbarWordPress Toolbar <= 2.2.6 - Open Redirect6.1 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection3.4 Low
- synology diskstation manager (dsm), diskstation manager +1 moreURL redirection to untrusted site ('Open Redirect') vulnerability in file access component in...5.4 Medium
- codeastro internet banking systemCodeAstro Internet Banking System pages_client_signup.php redirect3.5 Low
- anglersnet co,.ltd. access analysis cgi an-analyzer, anglers-net cgi an-anlyzer +1 moreOpen redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and...6.1 Medium
- ibm storage defender - data protect, storage defender data protect +1 moreIBM Storage Defender HTTP HOST header injection6.5 Medium
- kiteworks security-advisories, nextcloud sso \& saml authentication +1 moreOpen redirect in user_saml via RelayState parameter in Nextcloud User Saml3.1 Low
- t1 project t1T1 theme <= 19.0 - Open Redirect6.1 Medium
- fireeye hxtoolOpen Redirect vulnerability in FireEye HXTool5.4 Medium
- codecanyon rise ultimate project manager, rise rise ultimate project manager +1 moreCodeCanyon RISE Ultimate Project Manager signin redirect6.9 Medium
- easycorp zentaoZentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from...6.1 Medium
- sap marketing, sap se marketing (contacts app) +1 moreURL Redirection vulnerability in SAP Marketing (Contacts App)3.7 Low
- tasmoadminOpen redirect in TasmoAdmin6.1 Medium
- flarum, flarum framework +1 moreFlarum's Logout Route allows open redirects6.5 Medium
- hcl software dryice myxalyticsOpen Redirect affects DRYiCE MyXalytics3.7 Low
- follow-redirects, follow-redirects follow redirects +1 moreFollow Redirects improperly handles URLs in the url.parse() function7.3 High
- brave browserBrave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect...6.1 Medium
- codepeople calculated fields formWordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection4.1 Medium
- aam advanced access manager – restricted content, users & roles, enhanced security and more, vasyltech advanced access manager +1 moreWordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection4.7 Medium
- ibericode mailchimp, pluginops mailchimp subscribe form, optin builder, popup builder, form builder +1 moreWordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection4.7 Medium
- pexle chris library viewerWordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Open Redirection4.7 Medium
- dylan james zephyr project manager, zephyr project manager project project manager +1 moreWordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection4.7 Medium
- wp directory kit directory kit, wpdirectorykit wp directory kit +1 moreWordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection4.7 Medium
- crm perks integration for hubspot and contact form 7, wpforms, elementor, ninja forms, crmperks database for contact form 7\, wpforms\, elementor forms +1 moreWordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection4.7 Medium
- solidwp solid security – password, two factor authentication, and brute force protection, solid security +1 moreWordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection3.7 Low
- alfasado powercms, alfasado inc. powercms (powercms 4 series), powercms (powercms 5 series) +1 more +3 moreOpen redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote...6.1 Medium
- flask-security-too project flask-security-tooOpen redirect vulnerability in Flask-Security-Too6.1 Medium
- aspnetzero asp.net zeroAn open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows...6.1 Medium
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypass7.1 High
- efacec uc 500e, uc 500e firmware +1 moreURL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E4.3 Medium
- parcel pro pro, parcelpro parcel pro +1 moreWordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection4.7 Medium
- Show moreLoading…