cve.bz

CWE-601: URL Redirection to Untrusted Site (Open Redirect), page 32

Filter

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

What the weakness is: CWE-601 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-178 Cross-Site Flashing Likelihood: Medium · Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-601, as MITRE names them. Credits.

Ask an AI about CWE-601

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-601: URL Redirection to Untrusted Site and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/601.html and https://cve.bz/cve/cwe/601?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2019-15772EPSS 1.3%

    The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

  2. 6.1CVE-2016-6154EPSS 0.9%

    The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).

  3. 8.8CVE-2019-10751EPSS 2.0%

    All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to…

  4. 6.1CVE-2019-13422EPSS 0.9%

    Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.

  5. 6.1CVE-2019-11589EPSS 1.1%

    The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cros…

  6. 6.1CVE-2019-11585EPSS 1.3%

    The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of per…

  7. 6.1CVE-2019-1954EPSS 1.1%

    A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validatio…

  8. 6.1CVE-2019-10372EPSS 1.0%

    An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.

  9. 6.1CVE-2016-10769EPSS 0.7%

    cPanel before 60.0.25 allows an open redirect via /cgi-sys/FormMail-clone.cgi (SEC-162).

  10. 5.0CVE-2017-18441EPSS 0.6%

    cPanel before 64.0.21 allows demo accounts to redirect web traffic (SEC-245).

  11. 7.4CVE-2017-18414EPSS 0.8%

    cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html (SEC-300).

  12. 8.1CVE-2019-9140EPSS 1.2%

    When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can explo…

  13. 6.1CVE-2018-20929EPSS 0.6%

    cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).

  14. 4.3CVE-2019-14403EPSS 0.7%

    cPanel before 78.0.18 offers an open mail relay because of incorrect domain-redirect routing (SEC-483).

  15. 6.1CVE-2018-20867EPSS 0.7%

    cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).

  16. 6.1CVE-2019-1020016EPSS 0.8%

    ASH-AIO before 2.0.0.3 allows an open redirect.

  17. 6.1CVE-2019-1943ExploitEPSS 9.7%

    A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input …

  18. 6.1CVE-2019-1010290ExploitEPSS 4.1%

    Babel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection to any URL, which is supplied to redirect.php in a "newurl" parameter. The component is: redirect.php. The attack vector is: The victim must op…

  19. 6.1CVE-2019-1075EPSS 2.6%

    A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.

  20. 6.1CVE-2018-12621EPSS 0.9%

    An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.

  21. 6.1CVE-2019-5969EPSS 1.1%

    Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login.

  22. 6.1CVE-2019-5965EPSS 1.1%

    Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

  23. 6.1CVE-2019-10721EPSS 1.0%

    BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx.

  24. 6.1CVE-2019-13175EPSS 0.9%

    Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites).

  25. 6.1CVE-2019-7275ExploitEPSS 9.0%

    Optergy Proton/Enterprise devices allow Open Redirect.

  26. 6.1CVE-2019-13038EPSS 1.4%

    mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.

  27. 5.4CVE-2019-5823EPSS 1.1%

    Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

  28. 6.1CVE-2019-10133EPSS 0.9%

    A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.

  29. 6.8CVE-2019-4153EPSS 1.0%

    IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vu…

  30. 6.1CVE-2017-14394EPSS 0.8%

    OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to perform phishing via …

  31. 5.4CVE-2019-11269ExploitEPSS 8.9%

    Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code…

  32. 6.1CVE-2019-3477EPSS 0.6%

    Micro Focus Solution Business Manager versions prior to 11.4.2 is susceptible to open redirect.

  33. 6.1CVE-2019-4201EPSS 1.0%

    IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exp…

  34. 6.1CVE-2018-13384EPSS 1.4%

    A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web dom…

  35. 9.3CVE-2019-6741EPSS 3.2%

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to January 2019 Security Update (SMR-JAN-2019 - SVE-2018-13467). User interaction is required to exploit this vulne…

  36. 5.4CVE-2017-5871ExploitEPSS 2.7%

    Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote).

  37. 7.5CVE-2019-6781EPSS 1.2%

    An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use the profile name to inject a potentially malicious link into…

  38. 6.1CVE-2019-5946EPSS 1.1%

    Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.

  39. 6.1CVE-2019-10117EPSS 1.3%

    An Open Redirect issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. A redirect is triggered after successful authentication within the Oauth/:GeoAuthController for…

  40. 6.1CVE-2019-8951EPSS 1.1%

    An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch D…

  41. 6.1CVE-2018-12300ExploitEPSS 3.1%

    Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.

  42. 5.4CVE-2019-5433EPSS 1.7%

    A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another (unsafe) domain, potentially used for stealing cr…

  43. 6.1CVE-2018-14931ExploitEPSS 2.4%

    An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI.

  44. 6.1CVE-2019-4166EPSS 1.5%

    IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL di…

  45. 6.1CVE-2019-3788EPSS 0.8%

    Cloud Foundry UAA Release, versions prior to 71.0, allows clients to be configured with an insecure redirect uri. Given a UAA client was configured with a wildcard in the redirect uri's subdomain, a remote malicious unauthenticated user ca…

  46. 6.1CVE-2019-10955EPSS 3.0%

    In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers…

  47. 6.1CVE-2019-4092EPSS 0.8%

    IBM Content Navigator 2.0.3 and 3.0CD could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerabilit…

  48. 6.1CVE-2019-8995EPSS 1.1%

    The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a…

  49. 6.1CVE-2018-20698EPSS 0.8%

    The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.

  50. 6.1CVE-2019-11016EPSS 1.2%

    Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.