CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- ory polisDOM-Based XSS in Ory Polis Login Page8.8 High
- hitachi ops center administratorOpen Redirect Vulnerability in Hitachi Ops Center Administrator4.3 Medium
- h3js h3h3 before 2.0.1-rc.18 Open Redirect via redirectBack()5.3 Medium
- suitecrmSuiteCRM has Unauthenticated Open Redirect in Leads WebToLead Capture5.4 Medium
- angular angular-cli, cli +1 moreAngular SSR Vulnerable to Protocol-Relative URL Injection via Single Backslash Bypass6.9 Medium
- wwbn avideoAVideo has an Open Redirect via Unvalidated redirectUri in userLogin.php2.1 Low
- samsung accountURL redirection in Samsung Account prior to version 15.5.01.1 allows remote attackers to...6.9 Medium
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +2 more +4 moreMirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface4.9 Medium
- @backstage plugin-auth-backend, linuxfoundation backstage +1 more@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass5.9 Medium
- wellchoose iftop, organization portal system +1 moreWellChoose｜IFTOP - Open redirect5.1 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Open Redirect allows URL Manipulation in Web Interface6.5 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)3.1 Low
actix-web-labcrates.ioactix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects5.4 Medium- syliusSylius has an Open Redirect via Referer Header6.9 Medium
- pocket-id pocket id, pocket-id +1 morePocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion7.1 High
- linagora twakeAn issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora...6.1 Medium
- sunbird sunbirded-portalAn issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed...6.1 Medium
- kings plugins b2bking premiumWordPress B2BKing Premium plugin < 5.4.20 - Open Redirection vulnerability4.7 Medium
- allauth, allauth django-allauth +1 moredjango-allauth has an open redirect vulnerability5.1 Medium
- internet routing registry daemon project routing registry daemon, irrdnet irrd +1 moreIRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links8.1 High
- plone isurlinportal, products.isurlinportal +1 moreProducts.isurlinportal: Possible open redirect when using more than 2 forward slashes5.3 Medium
- affineAFFiNE: Open Redirect via Regex Bypass in redirect-proxy6.9 Medium
- gradio-app gradioGradio has Open Redirect in OAuth Flow4.3 Medium
- angular angular-cliAngular SSR has an Open Redirect via X-Forwarded-Prefix6.9 Medium
- bigbluebuttonBigBlueButton has Open Redirect vulnerability in ApiController6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow4.3 Medium
- open-emr openemrOpenEMR has Open Redirect in Eye Exam Form6.1 Medium
- horillahorilla-opensource horilla Query Parameter global_search.py get redirect5.3 Medium
- traccarTraccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider Endpoints7.3 High
- unknown conditional captchaConditional CAPTCHA <= 4.0.0 - Open Redirect4.3 Medium
- feathersjs feathersFeathers: Open Redirect in OAuth callback enables account takeover7.4 High
- spipSPIP < 4.4.5 Open Redirect via Login Form5.1 Medium
- kaizencoders update urls – quick and easy way to search old links and replace them with new links in wordpressWordPress Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress plugin <= 1.4.0 - Open Redirection vulnerability4.7 Medium
- No product listedbusy Callback app.js redirect5.1 Medium
- github enterprise serverImproper Handling of HTTP Redirects vulnerability was identified in GitHub Enterprise Server that allowed leaking of authorization token and enabled remote code execution7.6 High
- kaizencoders url shortify – simple and easy url shortenerURL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter4.7 Medium
- wpshuffle frontend post submission manager lite – frontend posting wordpress pluginFrontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter6.1 Medium
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.8 Medium
- tr7 cyber defense inc. web application firewallOpen Redirect in TR7's Web Application Firewall4.3 Medium
- ritwickdey live serverAn issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files...4.3 Medium
- fastgptFastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack6.9 Medium
- elated-themes frappeFrappe Affected by XSS and Open Redirect in Sign Up6.1 Medium
- sap business server pages, sap se business server pages application (taf applauncher) +1 moreOpen Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)6.1 Medium
- sap document management system, erp, s4core +2 moreMultiple vulnerabilities in BSP Applications of SAP Document Management System6.1 Medium
- sap businessobjects business intelligence platformOpen Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform7.3 High
- sap se netweaver application server abap and sap s/4hana, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA6.5 Medium
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 moreA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This...6.9 Medium
- mwielgoszewski doormanmwielgoszewski doorman views.py is_safe_url redirect5.3 Medium
- tgies client-certificate-authclient-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect6.1 Medium
- edimax br-6258n, br-6258n firmware +1 moreEdimax BR-6258n formStaDrvSetup redirect5.1 Medium
- Show moreLoading…