cve.bz

CWE-601: URL Redirection to Untrusted Site (Open Redirect), page 21

Filter

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

What the weakness is: CWE-601 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-178 Cross-Site Flashing Likelihood: Medium · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-601, as MITRE names them. Credits.

Ask an AI about CWE-601

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-601: URL Redirection to Untrusted Site and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/601.html and https://cve.bz/cve/cwe/601?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2023-40306EPSS 0.4%

    SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.

  2. 6.1CVE-2023-20263EPSS 0.6%

    A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validati…

  3. 5.4CVE-2023-39364EPSS 0.7%

    Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth…

  4. 6.1CVE-2023-38574EPSS 0.5%

    Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

  5. 6.1CVE-2023-39371EPSS 0.4%

    StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601)

  6. 6.1CVE-2023-1279EPSS 0.4%

    An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would re…

  7. 6.1CVE-2023-39968EPSS 0.7%

    jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary site…

  8. 6.1CVE-2023-41080EPSS 6.5%

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.7…

  9. 6.1CVE-2022-45582EPSS 0.8%

    Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

  10. 6.1CVE-2022-44215EPSS 0.9%

    There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL.

  11. 6.1CVE-2022-27861EPSS 0.4%

    Unauth. Open Redirect vulnerability in Arscode Ninja Popups plugin <= 4.7.5 versions.

  12. 6.1CVE-2023-38998EPSS 0.6%

    An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.

  13. 6.1CVE-2023-34917EPSS 0.4%

    Fuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java.

  14. 6.1CVE-2023-34916EPSS 0.4%

    Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java.

  15. 6.1CVE-2023-35791EPSS 0.3%

    Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.

  16. 6.1CVE-2021-36580ExploitEPSS 1.6%

    Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.

  17. 6.1CVE-2023-37624EPSS 0.7%

    Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

  18. 6.1CVE-2021-39425EPSS 0.5%

    SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

  19. 5.4CVE-2023-30433EPSS 0.4%

    IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to s…

  20. 6.1CVE-2023-28020EPSS 0.4%

    URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external site via redirect URL response header.

  21. 6.1CVE-2023-3684EPSS 0.3%

    A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/de_DE of the component Base64 Encoding Handler. The manipulation of th…

  22. 6.1CVE-2023-37561EPSS 0.5%

    Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL. Affect…

  23. 6.1CVE-2023-37947EPSS 0.6%

    Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

  24. 4.8CVE-2023-3568EPSS 0.4%

    Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

  25. 8.2CVE-2023-35934EPSS 1.0%

    yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for down…

  26. 6.1CVE-2023-35948EPSS 0.4%

    Novu provides an API for sending notifications through multiple channels. Versions prior to 0.16.0 contain an open redirect vulnerability in the "Sign In with GitHub" functionality of Novu's open-source repository. It could have allowed an…

  27. 4.4CVE-2023-3515EPSS 0.5%

    Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.

  28. 6.1CVE-2023-3139ExploitEPSS 0.7%

    The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.

  29. 6.1CVE-2023-28364EPSS 0.4%

    An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL.

  30. 4.8CVE-2022-46407EPSS 0.3%

    Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection can lead to redirection of the submitted request to domain out of control of ENM …

  31. 6.1CVE-2023-35171EPSS 0.6%

    NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. Starting in version 26.0.0 and prior to version 26.0.2, an attacker could supply a URL that redirects an unsuspecting…

  32. 6.1CVE-2023-28799EPSS 0.4%

    A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.

  33. 6.1CVE-2023-33405ExploitEPSS 31%

    Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

  34. 6.1CVE-2023-34415EPSS 0.4%

    When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation pro…

  35. 6.1CVE-2023-24030EPSS 0.4%

    An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15. To exploit the vulnerability, an attacker would need to have obtained a valid zimbra auth token or a valid preauth token. O…

  36. 5.4CVE-2023-29307EPSS 0.5%

    Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to mali…

  37. 6.1CVE-2023-35029EPSS 0.5%

    Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_l…

  38. 4.1CVE-2023-34247EPSS 0.4%

    Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than…

  39. 6.1CVE-2021-4348EPSS 0.7%

    The Ultimate GDPR & CCPA plugin for WordPress is vulnerable to unauthenticated settings import and export via the export_settings & import_settings functions in versions up to, and including, 2.4. This makes it possible for unauthenticated…

  40. 6.1CVE-2023-32551EPSS 0.3%

    Landscape allowed URLs which caused open redirection.

  41. 6.1CVE-2015-10115EPSS 0.7%

    A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. Th…

  42. 6.1CVE-2015-10114EPSS 0.7%

    A vulnerability, which was classified as problematic, has been found in WooSidebars Plugin up to 1.4.1 on WordPress. Affected by this issue is the function enable_custom_post_sidebars of the file classes/class-woo-sidebars.php. The manipul…

  43. 6.1CVE-2015-10113EPSS 0.5%

    A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress. Affected by this vulnerability is the function admin_screen_logic of the file wooframework-tweaks.php. The manipulation of the argu…

  44. 5.4CVE-2022-4946EPSS 0.4%

    The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will red…

  45. 6.1CVE-2015-10112EPSS 0.7%

    A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress. Affected is the function admin_screen_logic of the file wooframework-branding.php. The manipulation of the argument url lead…

  46. 6.1CVE-2023-29540EPSS 0.3%

    Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to external protocol links in sandboxed iframes without <code>allow-top-navigation-to-custom-protocols</code>. This vulnerability affects Firefox for …

  47. 8.1CVE-2023-25734EPSS 0.8%

    After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system. This also had the potential to leak NTLM cre…

  48. 4.8CVE-2023-34224EPSS 0.3%

    In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible

  49. 6.1CVE-2023-32218EPSS 0.3%

    Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

  50. 6.1CVE-2023-23754EPSS 0.4%

    An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.