CWE-601: URL Redirection to Untrusted Site
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Also known as Open Redirect, Cross-site Redirect, Cross-domain Redirect.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- intelliants subrion cmsIntelliants Subrion CMS Login Page login.php authorize redirect5.3 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities5.4 Medium
- abis technology ltd. co. avesisUnauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS5.4 Medium
- e621nge621ng before 26.09.16 Open Redirect via URL Parameters5.3 Medium
- tautulliTautulli: Open redirect via whitespace bypass in /auth/redirect5.4 Medium
- st engineering idirect evo idx, idx +1 moreST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting5.3 Medium
- st engineering idirect evo idx, idx +1 moreST Engineering iDirect iDX/Evo iDX Location Header redirect5.3 Medium
- No product listedWuzhiCMS Login index.php redirect5.3 Medium
- johndarrel hide my wp ghost – security & firewallWP Ghost (Hide My WP Ghost) <= 7.0.02 - Unauthenticated Open Redirect via 'redirect_to' Parameter4.7 Medium
- cotontiCotonti through 1.0.0 Stored Open Redirect via Page redir: Prefix5.1 Medium
- cotontiCotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regex5.3 Medium
- zoriya kyooKyoo: OIDC login token can be redirected to an attacker-controlled URL6.5 Medium
- semanticmediawikiSemantic MediaWiki has an open redirect in Special:URIResolver6.1 Medium
- jimprosser obsidian-web-mcpObsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user9.4 Critical
- apple containerizationA remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This…7.5 High
- jenkins project keycloak authentication pluginJenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after...4.3 Medium
- stefano lissa newsletterNewsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu Parameter5.3 Medium
- a2ui-project a2uia2ui-project a2ui Binder generic-binder.ts openUrl redirect5.3 Medium
- oracle corporation bi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration)....7.6 High
- oracle corporation field serviceVulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Internal...5.4 Medium
- nezhahq nezhaNezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri9.3 Critical
- developers italia design-scuole-wordpress-themeHTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme5.1 Medium
- halo-dev haloHalo through 2.26.1 Open Redirect via Unvalidated URI Parameter5.3 Medium
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access4.7 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect6.5 Medium
- mattermost, mattermost server +1 moreMattermost DCR redirect URI allowlist bypass via improper URL component validation6.8 Medium
- apache software foundation syncopeApache Syncope: CAS service URL injection via Forwarded HTTP headers6.1 Medium
- nagios xiAn issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can...3.1 Low
- unknown user registration & membershipUser Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters4.7 Medium
- cisa malcolmOpen Redirect in Malcolm5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter.5.3 Medium
- mend mend-renovate-enterprise-edition, renovatebot renovate, mend mend-renovate-ce +3 more +5 moreRenovate before 44.11.2 Credential Exfiltration via Link Header9.2 Critical
- mend mend-renovate-enterprise-edition, renovatebot renovate, mend mend-renovate-ce +3 more +5 moreRenovate before 44.11.2 Credential Exfiltration via Link Header9.2 Critical
- mend mend-renovate-ce, mend-renovate-enterprise-edition, renovate-ce +3 more +5 moreRenovate before 44.11.3 Credential Exfiltration via Link Header9.2 Critical
- renovatebot renovate, mend mend-renovate-ce, mend-renovate-enterprise-edition +3 more +5 moreRenovate before 44.11.3 Credential Exfiltration via Link Header9.2 Critical
- armiya information technologies ltd. co. access control systemOpen Redirect in Armiya Information Technologies' Access Control System9.3 Critical
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-1435.4 Medium
- drupal central authentication system (cas) serverCentral Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-1356.5 Medium
- grokability snipe-itSnipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState5.3 Medium
- yordam informatics technology consulting, training, and electronic systems industry and trade inc. library information and document automation programOpen Redirect in Yordam Informatics's Library Automation System6.1 Medium
- trainingbusinesspros groundhogg — crm, newsletters, and marketing automationGroundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter4.7 Medium
- fortinet fortisiemA url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0...2.8 Low
- mispMISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL5.1 Medium
- unknown accept stripe paymentsAccept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler4.3 Medium
- dubDub Open Redirect via Unrestricted redir_url Parameter5.3 Medium
- jenkins project ldap pluginJenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL...4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html4.3 Medium
- arubanetworks fabric composerUnauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface5.4 Medium
- ash-project ash typescriptUnescaped path parameters in AshTypescript generated TypeScript client allow request redirection2.3 Low
- google androidIn buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a...7.8 High
- Show moreLoading…