CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- amauri wpmobile.appWPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter7.2 High
- havelsan liman mysOpen Redirect in HAVELSAN's Open Source Project Liman MYS4.8 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability4.5 Medium
- mailcow mailcow-dockerized, mailcow\ +1 moremailcow: dockerized vulnerable to password reset poisoning7.1 High
- siemens teamcenter, teamcenter v14.1, teamcenter v14.2 +4 more +6 moreA vulnerability has been identified in Teamcenter (All versions < V14.3.0.0). The SSO login...6.1 Medium
- sap se approuter node.js packageAuthentication bypass via authorization code injection in SAP Approuter8.1 High
- sap se hana extended application services, advanced model (user account and authentication services)Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)7.1 High
- dedecmsDedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error...6.5 Medium
- zenvia movideskZenvia Movidesk Login redirect6.9 Medium
- No product listedA Host Header Poisoning Open Redirect issue in slabiak Appointment Scheduler v.1.0.5 allows a...6.1 Medium
org.openmrs.module:addresshierarchyMaven,org.openmrs.module:attachmentsMaven,org.openmrs.module:idgenMaven +3 more +5 moreGeneral OpenMRS Security Advisory, January 2025: Penetration Testing Results and PatchesNo score- kb support support, logon kb support +1 moreWordPress KB Support plugin <= 1.6.7 - Open Redirection vulnerability4.7 Medium
- thimpress learnpressWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerability4.7 Medium
- No product listedAn issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user...6.5 Medium
- No product listedAn issue in Zhiyuan Yuedu (Guangzhou) Literature Information Technology Co., Ltd Shuqi Novel iOS...6.5 Medium
- No product listedAn issue in Pixocial Technology (Singapore) Pte. Ltd BeautyPlus iOS 7.8.010 allows attackers to...6.5 Medium
- No product listedAn issue in Shenzhen Intellirocks Tech Co. Ltd Govee Home iOS 6.5.01 allows attackers to access...6.5 Medium
- No product listedAn issue in Cloud Whale Interactive Technology LLC. PolyBuzz iOS 2.0.20 allows attackers to...6.5 Medium
- No product listedAn issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS...6.5 Medium
- No product listedAn issue in Shanghai Shizhi Information Technology Co., Ltd Shihuo iOS 8.16.0 allows attackers to...6.5 Medium
- No product listedAn issue in Che Hao Duo Used Automobile Agency (Beijing) Co., Ltd Guazi Used Car iOS 10.15.1...6.5 Medium
- No product listedAn issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers...6.5 Medium
- No product listedAn issue in Tencent Technology (Shanghai) Co., Ltd WeSing iOS v9.3.39 allows attackers to access...6.5 Medium
- No product listedAn issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows...6.5 Medium
- No product listedAn issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access...6.5 Medium
- No product listedAn issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers...6.5 Medium
- No product listedAn issue in Tencent Technology (Shenzhen) Company Limited QQMail iOS 6.6.4 allows attackers to...6.5 Medium
- No product listedAn issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows...6.5 Medium
- No product listedAn issue in Baidu (China) Co Ltd Baidu Input Method (iOS version) v12.6.13 allows attackers to...6.5 Medium
- No product listedAn issue in Beijing Baidu Netcom Science & Technology Co Ltd Baidu Lite app (iOS version) 6.40.0...6.5 Medium
- No product listedAn issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to...6.5 Medium
- No product listedAn issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access...6.5 Medium
- No product listedAn issue in Guangzhou Polar Future Culture Technology Co., Ltd University Search iOS 2.27.0...6.5 Medium
- No product listedAn issue in KuGou Technology CO. LTD KuGou Music iOS v20.0.0 allows attackers to access sensitive...6.5 Medium
- No product listedAn issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access...6.5 Medium
- No product listedIncorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 allows unauthorized...6.5 Medium
- joeybling bootplusJoeyBling bootplus QrCodeController.java qrCode redirect6.9 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...6.1 Medium
- labredescefetrj wegiaWeGIA Open Redirect vulnerability4.8 Medium
- brave desktop browserOn most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site...6.1 Medium
- typo3Potential Open Redirect via Parsing Differences in TYPO34.8 Medium
- venki supravizio bpmThe login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to...7.2 High
- sickchillGHSL-2024-288: SickChill open redirect in login1.9 Low
- mozilla firefoxAddress bar spoofing using an invalid protocol scheme on Firefox for Android5.3 Medium
- better-auth better auth, better-auth +1 moreBetter Auth has an Open Redirect Vulnerability in Verify Email Endpoint7.9 High
- ruifang-tech rebuildruifang-tech Rebuild Admin Verification Page admin-verify redirect5.3 Medium
- ibm cognos analyticsIBM Cognos Analytics HTTP open redirection6.8 Medium
- ujcmsA URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the...5.4 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab6.4 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab8.7 High
- Show moreLoading…