cve.bz

CWE-601: URL Redirection to Untrusted Site (Open Redirect), page 25

Filter

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

What the weakness is: CWE-601 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-178 Cross-Site Flashing Likelihood: Medium · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-601, as MITRE names them. Credits.

Ask an AI about CWE-601

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-601: URL Redirection to Untrusted Site and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/601.html and https://cve.bz/cve/cwe/601?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2022-32444ExploitEPSS 2.4%

    An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php.

  2. 6.1CVE-2022-31040EPSS 0.7%

    Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contains an open redirect by injecting a `referer` querystring parameter and failing to validate…

  3. 6.1CVE-2022-24969EPSS 1.9%

    bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.

  4. 6.1CVE-2022-29718EPSS 1.1%

    Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

  5. 6.1CVE-2022-23237EPSS 0.6%

    E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.

  6. 6.1CVE-2022-29214EPSS 0.7%

    NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. Prior to versions 3.29.3 and 4.3.3, an open redirect vulnerability is present when the developer is implementing an OAuth 1 provider. Versions 3.29…

  7. 8.5CVE-2022-29170EPSS 1.2%

    Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The v…

  8. 6.1CVE-2022-1774EPSS 1.2%

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.

  9. 6.1CVE-2022-30992EPSS 0.6%

    Open redirect via user-controlled query parameter. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 29240

  10. 6.1CVE-2022-1702EPSS 9.1%

    SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability.

  11. 6.1CVE-2022-22797EPSS 0.5%

    Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" request from the url location: /CommunitySSORedirect.jsp?redirectURL=https://google.com. Unvalidated redirects and forwards a…

  12. 5.4CVE-2022-1209EPSS 0.7%

    The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims …

  13. 6.1CVE-2021-44054EPSS 0.6%

    An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fi…

  14. 4.7CVE-2022-20794EPSS 0.7%

    Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected …

  15. 8.1CVE-2022-20764EPSS 1.0%

    Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected …

  16. 6.1CVE-2022-27461EPSS 0.7%

    In nopCommerce 4.50.1, an open redirect vulnerability can be triggered by luring a user to authenticate to a nopCommerce page by clicking on a crafted link.

  17. 6.1CVE-2022-26326EPSS 0.4%

    Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2

  18. 6.1CVE-2022-24887EPSS 0.9%

    Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versions 11.3.4, 12.2.2, and 13.0.0, when sharing a Deck card in conversation, the metaData can be manipulated so users can b…

  19. 6.1CVE-2021-25111ExploitEPSS 1.9%

    The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

  20. 6.1CVE-2020-14118EPSS 0.6%

    An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps.

  21. 6.1CVE-2022-1254EPSS 0.8%

    A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 allows a remote attacker to redirect a u…

  22. 6.1CVE-2022-24858EPSS 0.8%

    next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able to upgrade for any reason, you can add…

  23. 6.1CVE-2022-1019EPSS 0.7%

    Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or…

  24. 6.1CVE-2022-0645EPSS 0.8%

    Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.

  25. 6.1CVE-2020-25154EPSS 0.7%

    An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to redirect users to malicious w…

  26. 6.1CVE-2022-27256EPSS 1.5%

    A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

  27. 4.7CVE-2022-28215EPSS 0.8%

    SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious site due to insufficient URL validation. This could lead to the user being tricked to disclose person…

  28. 5.4CVE-2022-27110EPSS 0.5%

    OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.

  29. 5.4CVE-2022-27109EPSS 0.5%

    OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability.

  30. 6.1CVE-2022-27463EPSS 0.6%

    Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page.

  31. 6.1CVE-2022-1233EPSS 0.8%

    URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.

  32. 6.1CVE-2022-24794EPSS 0.7%

    Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users of the `requiresAuth` middleware, either directly or through the default `authRequired` option, are vulnerable to an O…

  33. 6.1CVE-2022-23798EPSS 0.6%

    An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.

  34. 6.1CVE-2022-26950EPSS 0.6%

    Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote unprivileged attacker may potentially redirect legitimate users to arbitrary web sites and conduct phishing attacks. The attacker could then steal …

  35. 6.1CVE-2005-10001EPSS 0.7%

    A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads t…

  36. 6.1CVE-2022-0283EPSS 0.8%

    An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL.

  37. 6.1CVE-2022-24776EPSS 1.0%

    Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue i…

  38. 6.1CVE-2022-1058ExploitEPSS 53%

    Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

  39. 5.4CVE-2022-27090EPSS 0.4%

    Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter.

  40. 6.1CVE-2022-0165ExploitEPSS 4.3%

    The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users

  41. 6.1CVE-2021-32478ExploitEPSS 1.1%

    The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

  42. 6.1CVE-2022-24739EPSS 0.9%

    alltube is an html front end for youtube-dl. On releases prior to 3.0.3, an attacker could craft a special HTML page to trigger either an open redirect attack or a Server-Side Request Forgery attack (depending on how AllTube is configured)…

  43. 6.1CVE-2021-41180EPSS 1.0%

    Nextcloud talk is a self hosting messaging service. In versions prior 12.1.2 an attacker is able to control the link of a geolocation preview in the Nextcloud Talk application due to a lack of validation on the link. This could result in a…

  44. 6.1CVE-2022-0697EPSS 0.6%

    Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.

  45. 6.1CVE-2022-0868EPSS 0.7%

    Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.

  46. 6.1CVE-2022-0869ExploitEPSS 2.6%

    Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.

  47. 6.1CVE-2021-46379ExploitEPSS 16%

    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.

  48. 6.1CVE-2021-3654ExploitEPSS 27%

    A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

  49. 6.1CVE-2022-26158EPSS 0.7%

    An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. Injection of a malicious URL in the Host: header of the HTT…

  50. 6.1CVE-2022-26156EPSS 0.7%

    An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action…