CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- adobe connectAdobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)6.1 Medium
- adobe connectAdobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)6.1 Medium
- dell ecs, elastic cloud storage +1 moreDell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low...4.3 Medium
- aviplugins.com login widget with shortcodeWordPress Login Widget With Shortcode plugin <= 6.1.2 - Open Redirection vulnerability4.7 Medium
- traefikX-Forwarded-Prefix Header still allows for Open Redirect in traefik6.3 Medium
- bunkerity bunkerwebOpen Redirect Vulnerability in Loading Page in bunkerweb5.1 Medium
- automated logic webctrl, carrier i-vu +1 moreAutomated Logic WebCTRL and Carrier i-Vu Open Redirect5.9 Medium
- nextcloud user oidc, kiteworks security-advisories +1 moreNextcloud User OIDC has an open redirection when logging in with User OIDC3.3 Low
- cisco enterprise chat and emailCisco Enterprise Chat and Email Open Redirect Vulnerability4.7 Medium
- pyload, pyload pyload/pyload, payload +2 moreOpen Redirection in pyload/pyload4.6 Medium
- apereo cas, central authentication service +1 moreApereo CAS login redirect5.3 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by unvalidated redirects and forwards5.4 Medium
- sensiolabs symfonyOpen redirect via browser-sanitized URLs in symfony/http-foundation3.1 Low
- fhir hapi fhirHAPI FHIR XML External Entity (XXE) vulnerability9.8 Critical
- usebruno brunoBruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for...6.5 Medium
- ping identity pingam, forgerock access management +1 moreOpen Redirect in PingAM5.1 Medium
- coderCoder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter5.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability4.7 Medium
- pbootcmsPbootCMS 3.2.8 is vulnerable to URL Redirect.6.1 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability4.7 Medium
- pkp pkb-libPublic Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack...6.1 Medium
- quomodosoft elementsready, elementsready addons for elementor +1 moreWordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability4.7 Medium
- smp7, wp.insider simple membership after login redirectionWordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability4.7 Medium
- metagauss eventprimeWordPress EventPrime plugin <= 4.0.4.5 - Open Redirection vulnerability4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +123 more +125 moreThe web server of affected devices does not properly validate input that is used for a user...5.1 Medium
- sonarrSonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- payflex payment gateway, tomlister payflex payment gateway +1 moreWordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability4.7 Medium
- microchip timeprovider 4100, timeprovider 4100 firmware +1 moreImproper verification of the Host header in TimeProvider 41008.7 High
- esri portal for arcgisBUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)6.1 Medium
- esri portal for arcgisBUG-000167983 - Unvalidated redirect in Portal for ArcGIS6.1 Medium
- @clerk expressOpen Redirect4.7 Medium
- clinical-genomics scoutScout contains an Open Redirect on Login via `next`5.4 Medium
- eclipse glassfishGlassfish redirect to untrusted site6.9 Medium
- modstart modstartcms, mostartcms +1 moreModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect...7.2 High
- bookreviewlibraryA host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the...8.8 High
- lpc lines police cadA host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the...8.8 High
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +13 more +15 moreKeycloak: vulnerable redirect uri validation results in open redirec6.1 Medium
- mozilla firefox, firefox for android +1 moreUnder certain conditions, an attacker with the ability to redirect users to a malicious site via...6.1 Medium
- mihail-barinov share this image, share this image project this image +1 moreShare This Image <= 2.03 - Open Redirect via link Parameter7.2 High
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab6.4 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab6.4 Medium
- payara, payara platform server +1 moreREST Interface Link Redirection via Host parameter7.0 High
- eclipse glassfishEclipse Glassfish: URL redirection vulnerability to untrusted sites6.1 Medium
- redhat keycloak, red hat build of keycloak, build of keycloak 24 +2 moreKeycloak-core: open redirect on account page6.1 Medium
- uniong webitrUniong WebITR - Open Redirect6.1 Medium
- loway queuemetricsLoway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System congratulations.php redirect6.9 Medium
- linuxos shakal-ngLinuxOSsk Shakal-NG views.py redirect5.3 Medium
- Show moreLoading…