CWE-601

Low likelihood

URL Redirection to Untrusted Site ('Open Redirect')

Parent: CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

1,631 vulnerabilities with CWE-601

CVE-2025-47789 MEDIUM

horilla <= 1.3 - Open Redirect via Crafted URL

CVSS 6.1

CVE-2025-30010 MEDIUM

SAP Supplier Relationship Management - Open Redirect

CVSS 6.1

CVE-2025-4513 MEDIUM

Catalyst User Key Authentication Plugin 20220819 - Open Redirect

CVSS 4.3

CVE-2025-40846 HIGH

Halo <2.174.101, 2.175.1-2.184.21 - Open Redirect

CVE-2025-46826 LOW

INSAgenda insa-auth - Open Redirect

CVE-2025-47644 MEDIUM

Zoho CRM with Elementor form <1.0.7 - Open Redirect

CVSS 4.7

CVE-2025-47456 MEDIUM

WP Gravity Forms Zendesk <1.1.2 - Open Redirect

CVSS 4.7

CVE-2025-47455 MEDIUM

CRM Perks Integration - Open Redirect

CVSS 4.7

CVE-2025-47454 MEDIUM

WP Gravity Forms Dynamics CRM <1.1.4 - Open Redirect

CVSS 4.7

CVE-2025-4328 LOW

fp2952 spring-cloud-base <7f050dc6db9afab82c5ce1d41cd74ed255ec9bfa ...

CVSS 3.5

CVE-2025-46553 MEDIUM

@misskey-dev/summaly <5.2.1 - Info Disclosure

CVSS 6.1

CVE-2025-4143 MEDIUM

cloudflare/workers-oauth-provider < 0.0.5 - Open Redirect via Improper redirect_uri Validation

CVSS 6.1

CVE-2025-3859 MEDIUM

Mozilla Firefox Focus < 138.0 - User Interface Misrepresentation via URL Eliding

CVSS 6.1

CVE-2025-32970 MEDIUM

XWiki WYSIWYG API - Open Redirect

CVSS 6.1

CVE-2025-2068 MEDIUM

FileZ Client < 11.0.0.10 - Open Redirect via Crafted URL

CVSS 5.0

CVE-2025-39404 MEDIUM

Heateor Support Sassy Social Share <3.3.73 - Open Redirect

CVSS 4.7

CVE-2025-39599 MEDIUM

Webilia Inc. Listdom <4.0.0 - Open Redirect

CVSS 4.7

CVE-2025-39597 MEDIUM

Arthur Yarwood Fast eBay Listings <2.12.15 - Open Redirect

CVSS 4.7

CVE-2025-3522 MEDIUM

Thunderbird < 128.9.2 and 128.9.2-137.0.1 - URL Redirection via X-Mozilla-External-Attachment-URL

CVSS 6.3

CVE-2025-31491 HIGH

AutoGPT < 0.6.1 - Open Redirect via Request Wrapper

CVSS 8.6

CVE-2025-32694 MEDIUM

Rustaurius Ultimate WP Mail <1.3.2 - Open Redirect

CVSS 4.7

CVE-2025-32693 MEDIUM

WebinarPress <= 1.33.28 - Open Redirect

CVSS 4.7

CVE-2025-3433 MEDIUM

Advanced Advertising System <1.3.1 - Open Redirect

CVSS 6.1

CVE-2025-3155 HIGH

Yelp - Arbitrary Script Execution via Help Document

CVSS 7.4

CVE-2025-31871 MEDIUM

Galaxy Weblinks WP Clone <3.4 - Open Redirect

CVSS 4.7

Details

Vulnerabilities 1,631

Exploit Likelihood Low

Links