CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component:...6.1 Medium
- kovah linkaceLinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeover8.1 High
- openclawOpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL4.9 Medium
- saltcornSaltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)5.1 Medium
- grafana lokiLoki Path Traversal - CVE-2021-36156 Bypass5.3 Medium
- cisco unity connectionCisco Unity Connection Open Redirect Vulnerability4.7 Medium
- futo immichimmich: Open Redirect via Shared Album name5.1 Medium
github.com/patrickhener/goshsGo,github.com/patrickhener/goshs/v2Go +1 moreUnauthenticated Open Redirect, Arbitrary HTTP Response Header Injection, Missing CSRF, and Invisible-Mode Bypass in goshs `/?redirect` endpoint0.0 None- adonisjs core, http-server, http-core +2 more@adonisjs/http-server has an Open Redirect vulnerability6.1 Medium
- fortinet fortinac-fAn URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in...2.2 Low
- kimaiKimai before 2.53.0 Open Redirect via RelayState5.3 Medium
- sap netweaver application server abapOpen Redirect vulnerability in SAP NetWeaver Application Server ABAP6.1 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter6.1 Medium
- churchcrm crmChurchCRM has an Open Redirect via the ‘linkBack’ URL Parameter in DonatedItemEditor.php5.3 Medium
- amannn next-intlnext-intl has an open redirect vulnerability6.9 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit4.7 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has validation-less redirect on login page0.0 None
- rocket.chatAn open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be...5.3 Medium
- apache tomcatApache Tomcat: Occasionally open redirect6.1 Medium
- aces lorisLORIS has an open redirect field on login4.3 Medium
- openclawOpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects7.1 High
- john darrel hide my wp ghostWordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability4.7 Medium
- hewlett packard enterprise (hpe) private 5g core, hpe aruba networking private 5g core +1 moreOpen Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-Prem8.8 High
- openedx, openedx openedx-platform +1 moreOpen edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameter4.7 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']5.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']5.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']5.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']5.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']5.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']5.1 Medium
github.com/authorizerdev/authorizerGoAuthorizer: Password reset token theft and full auth token redirect via unvalidated redirect_uri8.6 High- homarrDOM-Based XSS in Homarr /auth/login Redirect8.8 High
- ascertia signinghubAn open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a...6.1 Medium
- 7tik 7 tik7 Tik 1.0.1.0 Denial of Service via Search8.7 High
- directusDirectus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow6.1 Medium
- directusDirectus is an Open Redirect in Admin 2FA Setup Page4.3 Medium
- jupyter jupyterhubJupyterHub has an Open Redirect Vulnerability5.1 Medium
- casbin casdoorCasdoor OAuth Authorization Request redirect5.3 Medium
- hoppscotchhoppscotch: Improper loopback redirect_uri validation in device-login flow8.5 High
- hoppscotchhoppscotch: Open redirect via `/enter?redirect=`4.7 Medium
- signalk signal k server, signalk-server +1 moresignalk-server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow6.1 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: information disclosure due to redirect_uri validation bypass7.3 High
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access3.1 Low
- xenforoXenForo Open Redirect via getDynamicRedirect5.3 Medium
- freescoutFreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScout5.4 Medium
- discourseDiscourse: Open redirect via `sso_destination_url` cookie in `enter`5.1 Medium
- floragunn search guard flx, search-guard flx +1 moreOpen redirect vulnerability in Search Guard Kibana Plugin via manipulated requests4.3 Medium
- joinmastodon mastodonMastodon has a GET-Based Open Redirect via '/web/%2F<domain>'4.3 Medium
- n8nn8n - Cross-Site Scripting and Open Redirect in Form Node5.1 Medium
- statamic cms, statamic +1 moreStatamic has an Open Redirect on unauthenticated endpoints via URL parsing differential6.1 Medium
- Show moreLoading…