CWE-601
Low likelihoodURL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
1,631 vulnerabilities with CWE-601
CVE-2025-59013
MEDIUM
TYPO3 CMS Open Redirect via GeneralUtility::sanitizeLocalUrl
CVSS 6.1
CVE-2025-20291
MEDIUM
Cisco Webex Meetings - Open Redirect
CVSS 4.3
CVE-2025-58067
MEDIUM
google_sign_in < 1.3.1 - Open Redirect via Session Store 'proceed_to' Parameter
CVSS 4.2
CVE-2025-58204
MEDIUM
Podlove Podcast Publisher <4.2.5 - Open Redirect
CVSS 4.7
CVE-2025-57821
MEDIUM
google_sign_in < 1.3.0 - Open Redirect via Malformed URL
CVSS 4.2
CVE-2025-20317
HIGH
Cisco Unified Computing System (Managed) - Unauthenticated Open Redirect via vKVM Endpoint
CVSS 7.1
CVE-2025-2697
HIGH
IBM Cognos Command Center <10.2.5 - Open Redirect
CVSS 7.4
CVE-2025-52219
MEDIUM
SelectZero < 2025.5.2 - Open Redirect via Legacy UI Fields
CVSS 6.5
CVE-2025-43767
MEDIUM
Liferay Portal 7.4.3.86-7.4.3.131 & DXP 2024.Q1.1-2024.Q1.12 Open Redirect via /c/portal/edit_info_item
CVSS 6.1
CVE-2025-57800
HIGH
Audiobookshelf <2.26.3 - Open Redirect
CVSS 8.8
CVE-2025-55625
MEDIUM
Reolink v4.54.0.4.20250526 - Open Redirect
CVSS 6.3
CVE-2025-55624
MEDIUM
Reolink v4.54.0.4.20250526 - Unauthenticated Intent Redirection
CVSS 5.3
CVE-2025-55751
MEDIUM
HackUCF OnboardLite < 6cca19ea4f47af125caa08ef82594844f039e07e - Open Redirect via Redirect URL Parameter
CVE-2025-7777
MEDIUM
mirror registry for Red Hat OpenShift - Open Redirect via Host Header
CVSS 6.5
CVE-2025-55706
MEDIUM
Movable Type 7-8.0.6, 8.4.0-8.4.2 - Open Redirect via Password Reset Page
CVSS 4.3
CVE-2025-9193
LOW
TOTVS Portal Meu RH <12.1.17 - Open Redirect
CVSS 3.5
CVE-2025-55032
MEDIUM
Mozilla Focus for iOS < 142 - Cross-Site Scripting via Content-Disposition Header Mishandling
CVSS 6.1
CVE-2025-55031
CRITICAL
Firefox for iOS < 142 - Open Redirect via FIDO Passkey Transport
CVSS 9.8
CVE-2025-54145
CRITICAL
Firefox for iOS >=141 - URL Redirection to Untrusted Site via QR Scanner
CVSS 9.1
CVE-2025-54144
MEDIUM
Firefox < 141.0 - URL Redirection to Untrusted Site via Search Query Scheme
CVSS 5.4
CVE-2025-8066
MEDIUM
Bunkerity Bunker Web <1.6.2 - Open Redirect
CVE-2025-55207
MEDIUM
Astro < 9.4.1 - Open Redirect via Node Deployment Adapter in Standalone Mode
CVE-2025-54681
MEDIUM
CRM Perks Connector - Open Redirect
CVSS 4.7
CVE-2025-55166
MEDIUM
svg-sanitize < 0.22.0 - Open Redirect via XlinkHref Attribute Bypass
CVE-2025-8813
LOW
pybbs < 6.0.0 - Open Redirect via Referer Parameter in changeLanguage Function
CVSS 3.5
Details
Vulnerabilities
1,631
Exploit Likelihood
Low