cve.bz

CWE-601: URL Redirection to Untrusted Site (Open Redirect), page 26

Filter

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

What the weakness is: CWE-601 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-178 Cross-Site Flashing Likelihood: Medium · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-601, as MITRE names them. Credits.

Ask an AI about CWE-601

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-601: URL Redirection to Untrusted Site and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/601.html and https://cve.bz/cve/cwe/601?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2021-23495EPSS 0.9%

    The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.

  2. 6.1CVE-2022-24330EPSS 0.6%

    In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.

  3. 6.1CVE-2021-29217EPSS 0.7%

    A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.

  4. 6.1CVE-2022-0692ExploitEPSS 3.4%

    Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.

  5. 5.4CVE-2022-25196EPSS 0.7%

    Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect u…

  6. 6.1CVE-2022-0597ExploitEPSS 2.6%

    Open Redirect in Packagist microweber/microweber prior to 1.2.11.

  7. 6.1CVE-2021-25033ExploitEPSS 2.3%

    The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

  8. 8.8CVE-2021-46366EPSS 0.8%

    An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.

  9. 6.1CVE-2022-0560EPSS 1.0%

    Open Redirect in Packagist microweber/microweber prior to 1.2.11.

  10. 6.1CVE-2022-23618EPSS 0.8%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against URL redirection to untrusted sites, in particular some well known parameters (xred…

  11. 6.1CVE-2022-23102ExploitEPSS 4.7%

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious…

  12. 6.1CVE-2021-45328ExploitEPSS 1.0%

    Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.

  13. 6.1CVE-2022-23184EPSS 0.6%

    In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.

  14. 6.1CVE-2021-45408EPSS 0.6%

    Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect users to malicious sites using the "referuri" parameter.

  15. 6.1CVE-2022-22919EPSS 0.6%

    Adenza AxiomSL ControllerView through 10.8.1 allows redirection for SSO login URLs.

  16. 6.1CVE-2022-23599EPSS 0.8%

    Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone that are dependent on Products.ATContentTypes prior to version 3.0.6 are vulnerable to reflected cross site scripting and open redirect when an attac…

  17. 6.1CVE-2021-25074ExploitEPSS 2.2%

    The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue

  18. 6.1CVE-2021-25028ExploitEPSS 1.9%

    The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue

  19. 6.1CVE-2021-24838ExploitEPSS 2.2%

    The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vend…

  20. 6.1CVE-2022-0235EPSS 1.7%

    node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

  21. 6.1CVE-2021-38678EPSS 0.6%

    An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerabil…

  22. 6.1CVE-2021-44528ExploitEPSS 4.4%

    A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack t…

  23. 6.1CVE-2022-0122EPSS 0.9%

    forge is vulnerable to URL Redirection to Untrusted Site

  24. 6.1CVE-2022-21651EPSS 0.8%

    Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may be arbitrary redirected due to incomplete URL handling in the shopware router. This issue has been resolved in version 5…

  25. 6.1CVE-2021-20875EPSS 0.8%

    Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary we…

  26. 6.1CVE-2021-40852EPSS 0.7%

    TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain infor…

  27. 6.1CVE-2021-43812EPSS 0.7%

    The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before 1.6.2 do not filter out certain returnTo parameter values from the login url, which expose the application to an open redirect…

  28. 6.1CVE-2020-18985EPSS 0.7%

    An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.

  29. 6.1CVE-2021-3829EPSS 0.9%

    openwhyd is vulnerable to URL Redirection to Untrusted Site

  30. 6.1CVE-2021-43532EPSS 0.5%

    The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the mid…

  31. 6.1CVE-2021-43064EPSS 0.6%

    A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via re…

  32. 5.4CVE-2021-36191EPSS 0.5%

    A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers

  33. 6.1CVE-2021-4000EPSS 0.8%

    showdoc is vulnerable to URL Redirection to Untrusted Site

  34. 6.1CVE-2021-3989EPSS 0.8%

    showdoc is vulnerable to URL Redirection to Untrusted Site

  35. 5.4CVE-2021-42564EPSS 0.7%

    An open redirect through HTML injection in confidential messages in Cryptshare before 5.1.0 allows remote attackers (with permission to provide confidential messages via Cryptshare) to redirect targeted victims to any URL via the '<meta ht…

  36. 6.1CVE-2021-43777EPSS 0.3%

    Redash is a package for data visualization and sharing. In Redash version 10.0 and prior, the implementation of Google Login (via OAuth) incorrectly uses the `state` parameter to pass the next URL to redirect the user to after login. The `…

  37. 6.1CVE-2021-38000KEVEPSS 4.9%

    Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

  38. 5.4CVE-2021-36332EPSS 0.6%

    Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, directing end user to arbitrary and potentially malicious we…

  39. 6.1CVE-2021-41733EPSS 0.7%

    Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.

  40. 6.1CVE-2021-1500EPSS 0.8%

    A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL p…

  41. 6.1CVE-2021-43058EPSS 0.6%

    An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click …

  42. 6.1CVE-2021-34764EPSS 0.6%

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information abou…

  43. 4.8CVE-2021-34763EPSS 0.5%

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information abou…

  44. 5.4CVE-2021-3851EPSS 0.6%

    firefly-iii is vulnerable to URL Redirection to Untrusted Site

  45. 6.1CVE-2021-22942EPSS 1.7%

    A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

  46. 8.8CVE-2021-22964EPSS 1.0%

    A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//y…

  47. 6.1CVE-2021-22963EPSS 1.2%

    A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up o…

  48. 6.1CVE-2021-20806EPSS 0.8%

    Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

  49. 6.1CVE-2021-20031ExploitEPSS 13%

    A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

  50. 6.1CVE-2021-34772EPSS 1.0%

    A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based…