CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking...3.3 Low
- google androidIn onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary...7.3 High
- google androidIn onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay...7.8 High
- joomshaper.com helix ultimate extension for joomlaJoomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.105.3 Medium
- nokia nspAn Open Re-direct Vulnerability in Nokia NSP5.3 Medium
- jeremyevans rodauthRodauth before 2.47.0 Open Redirect via Return-to Path4.9 Medium
- pac4jpac4j-core before 6.5.6 Open Redirect via Backslash Logout5.3 Medium
- unknown masterstudy lms wordpress pluginMasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect4.7 Medium
- pocket-idPocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none4.3 Medium
- twentyhq twentyTwenty Open Redirect via OAuth Propagator Callback5.3 Medium
- broadcom spring authorization server, spring authorization server +1 moreSpring Authorization Server: Open Redirect via request_uri parameter6.1 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Open Redirect in UrlHandlerFilter6.1 Medium
- broadcom reactor nettyReactor Netty WebSocket Client Leaks Credentials On Redirect6.1 Medium
- stalwartlabs stalwartStalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri8.5 High
- open-metadata openmetadataOpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI8.5 High
- corootCoroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration7.0 High
- ctfdCTFd __init__.py _is_safe_url redirect5.3 Medium
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.55.1 Medium
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.665.3 Medium
- freedomofpress securedrop-clientsecuredrop-proxy origin limitation can be bypassed with redirects3.7 Low
- unstructured-io unstructuredunstructured: Server-Side Request Forgery in the URL-based partitioning9.3 Critical
- pylons webobWebOb: Open redirect in Location header normalization via leading C0 control / space characters6.1 Medium
- No product listedPunk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter5.7 Medium
- getgrav gravGrav: Unauthenticated open redirect via login twofa_cancel _redirect5.3 Medium
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.645.1 Medium
- oracle hyperion infrastructure technologyVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion ...9.6 Critical
- getgrav gravGrav API Plugin Open Redirect via Backslash Bypass8.6 High
- medplumMedplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage7.1 High
- saurus cms community editionSaurus CMS Unauthenticated Open Redirect via logout url parameter5.1 Medium
- ether etherpadEtherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)6.1 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Open Redirect in UrlFileNameViewController6.1 Medium
- meeting-room-booking-system mrbs-codeMeeting Room Booking System has an unauthenticated open redirect6.9 Medium
- red hat openshift container platform 4Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.4.3 Medium
- sap se odataServer-controlled `__next` URL is not checking cross-origin5.9 Medium
- sap approuter, sap se business ai platform (approuter) +1 moreMultiple vulnerabilities in SAP Business AI Platform (Approuter)7.0 High
- phoenixframework phoenix live viewOpen redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR2.1 Low
- home-assistant coreHome Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing4.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Open Redirect via the 'replyUrl' parameter5.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Header Injection through the 'cType' URL parameter5.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Header Injection leading to Open Redirect via URL-encoded characters5.3 Medium
- rrrene htmlsanitizeex, html sanitize ex +1 morehtml_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection2.3 Low
- rrrene html sanitize ex, htmlsanitizeex +1 morehtml_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking4.8 Medium
- djangocrm django-crmDjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url Parameter4.3 Medium
- bilin software and informatics consultancy inc. humanist digital human resourcesURL Redirection in Bilin Software's HUMANIST Digital Human Resources5.4 Medium
- creative motion clearfy cacheClearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler4.7 Medium
- kalcaddle kodboxkalcaddle kodbox SSO API Login apiLogin redirect5.3 Medium
- getgrav grav-plugin-formGrav Form Plugin before 9.1.13 Open Redirect via form.value() Twig7.1 High
- geonetwork core-geonetworkcore-geonetwork has an Open Redirect Bypass4.8 Medium
- s9y serendipitySerendipity < 2.6.1 Open Redirect via exit.php2.1 Low
- ibm planning analytics localIBM Planning Analytics Local is affected by Open Redirect7.5 High
- Show moreLoading…