CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- leantimeLeantime Open Redirect in Login Controller via redirectUrl Parameter5.1 Medium
- google chromeInappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...4.3 Medium
- langgenius difyDify AI Workflow oauth_redirect_url Open Redirect Vulnerability5.4 Medium
- koxudaxi datamodel-code-generatordatamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas3.7 Low
- ruby-oauth oauth2OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host8.6 High
- mispOpen Redirect in MISP Installer-Generated Apache Configuration7.8 High
- ads-tec industrial it dvg-irf1401, dvg-irf1421, dvg-irf3401 +3 more +5 moreads-tec Industrial IT: Post-login open redirect in the web interface6.1 Medium
- takayukister contact form 7Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect4.7 Medium
- No product listedAn issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect...4.9 Medium
- backstage, linuxfoundation backstage\/plugin-auth-backend +1 moreBackstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`4.7 Medium
- @tanstack react-routerReact Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)5.1 Medium
- @tanstack react-routerReact Router: Open redirect can lead to XSS6.9 Medium
- unblu inc. sparkUnblu Spark Open Redirect leading to DOM-Based XSS9.3 Critical
- oracle work in processVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component:...5.4 Medium
- oracle e-business suite, oracle corporation production scheduling +1 moreVulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component:...5.3 Medium
- oracle e-business suite, oracle corporation contracts integration +1 moreVulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:...6.1 Medium
- oracle corporation hrms (republic of korea), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite ...5.4 Medium
- oracle agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...7.6 High
- oracle communications convergent charging controllerVulnerability in the Oracle Communications Convergent Charging Controller product of Oracle...6.4 Medium
- oracle banking trade finance process managementVulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial...9.6 Critical
- oracle corporation mysql connectors, oracle mysql connector\/j +1 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). ...6.5 Medium
- oracle peoplesoft enterprise cc common application objectsVulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle...8.7 High
- oracle e-business suite, oracle corporation transportation execution +1 moreVulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite ...5.4 Medium
- oracle learning managementVulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component:...7.3 High
- oracle property managerVulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component:...5.4 Medium
- oracle knowledge managementVulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component:...6.1 Medium
- oracle e-business suite, oracle corporation isupport +1 moreVulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal...6.1 Medium
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.5 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.6 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.6 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.3 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...9.3 Critical
- oracle webcenter content, oracle corporation webcenter content: imaging +1 moreVulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component:...7.5 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.4 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.4 Medium
- oracle database serverVulnerability in the JDBC component of Oracle Database Server. Supported versions that are...6.8 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.4 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.1 High
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...6.1 Medium
- Show moreLoading…