CWE-601

Low likelihood

URL Redirection to Untrusted Site ('Open Redirect')

Parent: CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

1,631 vulnerabilities with CWE-601
CVE-2025-59013 MEDIUM
TYPO3 CMS Open Redirect via GeneralUtility::sanitizeLocalUrl
CVSS 6.1
CVE-2025-20291 MEDIUM
Cisco Webex Meetings - Open Redirect
CVSS 4.3
CVE-2025-58067 MEDIUM
google_sign_in < 1.3.1 - Open Redirect via Session Store 'proceed_to' Parameter
CVSS 4.2
CVE-2025-58204 MEDIUM
Podlove Podcast Publisher <4.2.5 - Open Redirect
CVSS 4.7
CVE-2025-57821 MEDIUM
google_sign_in < 1.3.0 - Open Redirect via Malformed URL
CVSS 4.2
CVE-2025-20317 HIGH
Cisco Unified Computing System (Managed) - Unauthenticated Open Redirect via vKVM Endpoint
CVSS 7.1
CVE-2025-2697 HIGH
IBM Cognos Command Center <10.2.5 - Open Redirect
CVSS 7.4
CVE-2025-52219 MEDIUM
SelectZero < 2025.5.2 - Open Redirect via Legacy UI Fields
CVSS 6.5
CVE-2025-43767 MEDIUM
Liferay Portal 7.4.3.86-7.4.3.131 & DXP 2024.Q1.1-2024.Q1.12 Open Redirect via /c/portal/edit_info_item
CVSS 6.1
CVE-2025-57800 HIGH
Audiobookshelf <2.26.3 - Open Redirect
CVSS 8.8
CVE-2025-55625 MEDIUM
Reolink v4.54.0.4.20250526 - Open Redirect
CVSS 6.3
CVE-2025-55624 MEDIUM
Reolink v4.54.0.4.20250526 - Unauthenticated Intent Redirection
CVSS 5.3
CVE-2025-55751 MEDIUM
HackUCF OnboardLite < 6cca19ea4f47af125caa08ef82594844f039e07e - Open Redirect via Redirect URL Parameter
CVE-2025-7777 MEDIUM
mirror registry for Red Hat OpenShift - Open Redirect via Host Header
CVSS 6.5
CVE-2025-55706 MEDIUM
Movable Type 7-8.0.6, 8.4.0-8.4.2 - Open Redirect via Password Reset Page
CVSS 4.3
CVE-2025-9193 LOW
TOTVS Portal Meu RH <12.1.17 - Open Redirect
CVSS 3.5
CVE-2025-55032 MEDIUM
Mozilla Focus for iOS < 142 - Cross-Site Scripting via Content-Disposition Header Mishandling
CVSS 6.1
CVE-2025-55031 CRITICAL
Firefox for iOS < 142 - Open Redirect via FIDO Passkey Transport
CVSS 9.8
CVE-2025-54145 CRITICAL
Firefox for iOS >=141 - URL Redirection to Untrusted Site via QR Scanner
CVSS 9.1
CVE-2025-54144 MEDIUM
Firefox < 141.0 - URL Redirection to Untrusted Site via Search Query Scheme
CVSS 5.4
CVE-2025-8066 MEDIUM
Bunkerity Bunker Web <1.6.2 - Open Redirect
CVE-2025-55207 MEDIUM
Astro < 9.4.1 - Open Redirect via Node Deployment Adapter in Standalone Mode
CVE-2025-54681 MEDIUM
CRM Perks Connector - Open Redirect
CVSS 4.7
CVE-2025-55166 MEDIUM
svg-sanitize < 0.22.0 - Open Redirect via XlinkHref Attribute Bypass
CVE-2025-8813 LOW
pybbs < 6.0.0 - Open Redirect via Referer Parameter in changeLanguage Function
CVSS 3.5
Details
Vulnerabilities 1,631
Exploit Likelihood Low