CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible3.1 Low
- murtaza-nasir speakrSpeakr: Open redirect in is_safe_url via parser mismatch on next parameter6.1 Medium
- sensiolabs symfonySymfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection2.3 Low
- labredescefetrj wegiaWeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage5.4 Medium
- facebook for woocommerceWordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability4.7 Medium
- jenkins bitbucket oauth, jenkins project bitbucket oauth plugin +1 moreJenkins Bitbucket OAuth Plugin does not restrict the redirect URL after login4.3 Medium
- apache shiroApache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flow0.0 None
- apache shiro, apache software foundation shiro jakarta ee module +1 moreApache Shiro Jakarta EE module: Open redirect and SSRF (requires valid credentials)5.1 Medium
- benoitc hackneyHTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney6.0 Medium
- spipaction/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.3.5 Low
- devolutions serverImproper input validation in the external authentication provider flow in Devolutions Server...5.0 Medium
- dell powerflex manager, powerflex manager (appliance), powerflex manager (rack) +2 more +4 moreDell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An...6.1 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco.Cms: Open Redirect Vulnerability in Surface Controllers5.4 Medium
- esri arcgis serverUnvalidated Redirect in ArcGIS Server4.7 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.16, build of keycloak 26.4 +2 more +4 moreOrg.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak8.1 High
- eugeny tabbyTabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation7.1 High
- simplesamlphp simplesamlphp-module-casserverSimpleSAMLphp-casserver has an Open Redirect vulnerability via logout4.7 Medium
- ntop ntopngntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')4.3 Medium
- cubecart v6CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header8.1 High
- authlibAuthlib: Open Redirect in Authlib OIDC Implicit/Hybrid Authorization6.1 Medium
- horilla horilla-hrHorilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints4.8 Medium
- grokability snipe-itSnipe-IT: Open redirect vulnerability5.9 Medium
- akuity kargoKargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter5.1 Medium
- jgraph drawioUnvalidated gitlab URL parameter redirects OAuth authorize step to attacker-controlled host3.4 Low
- modelcontextprotocol registryMCP Registry: Open Redirect0.0 None
- heartcombo deviseDevise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler6.1 Medium
- cradle e-commerceMultiple vulnerabilities in Cradle e-commerce5.3 Medium
- electermUnvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click9.6 Critical
- lin-snow ech0Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass8.8 High
- divvydrive information technologies inc. divvydriveOpen Redirect in DivvyDrive Information Technologies' DivvyDrive9.6 Critical
- docling-project docling-graphDocling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler5.7 Medium
- microsoft kiota-java, microsoft-kiota-http, github.com/microsoft/kiota-http-go +3 more +5 moreKiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect7.0 High
- angular angular-cli, cli +1 moreAngular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix6.9 Medium
- nitro, nitrojs nitropack +1 moreNitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules5.3 Medium
- masacmsMasa CMS open redirect via improper handling of scheme-relative URLs5.3 Medium
- wger-project wgerwger before 2.6 Open Redirect via trainer-login next parameter5.1 Medium
- oracle macaron, oracle corporation macaron tool of oracle open source projects +1 moreVulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported...4.7 Medium
- openmage magento-ltsMagento LTS: Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` - magento-lts6.1 Medium
- workos authkit-session@workos/authkit-session: Open Redirect via state-derived redirect target4.3 Medium
- jupyter server, jupyter-server jupyter server +1 morejupyter_server next parameter open redirect can redirect users to external domains6.3 Medium
- jupyter notebook, jupyter-notebook help-extension, jupyterlab +2 moreJupyter Notebook and JupyterLab token theft via stored XSS in help command linker8.4 High
- konica minolta japan, inc. multiple mfps which implement ricoh web image monitor, ricoh company, ltd. multiple laser printers and mfps which implement web image monitor +1 moreOpen redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web...5.1 Medium
- admidioAdmidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest8.2 High
- n8nn8n: Open Redirect in MCP OAuth Consent Flow5.1 Medium
- jenkins azure ad, jenkins project microsoft entra id (previously azure ad) plugin +1 moreJenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerability4.3 Medium
- No product listedAn open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows...4.3 Medium
- microsoft 365 copilotMicrosoft 365 Copilot Elevation of Privilege Vulnerability9.3 Critical
- bigbluebuttonBigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"4.3 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...6.5 Medium
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...6.1 Medium
- Show moreLoading…