CWE-601
Low likelihoodURL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
1,526 vulnerabilities with CWE-601
CVE-2023-6380
MEDIUM
OpenCMS 14.0.0-15.9.9 - Open Redirect via URI Parameter
CVSS 6.1
CVE-2023-50456
MEDIUM
Zammad < 6.2.0 - Open Redirect via Crafted First or Last Name
CVSS 5.3
CVE-2023-28874
MEDIUM
Seafile 9.0.6 - Open Redirect via Login Next Parameter
CVSS 6.1
CVE-2023-48928
MEDIUM
Franklin Fueling Systems SSA <1.6.24.492 - Open Redirect
CVSS 6.1
CVE-2023-47548
MEDIUM
Integrate Google Drive < 1.3.2 - Open Redirect
CVSS 4.7
CVE-2023-45762
MEDIUM
Responsive Column Widgets < 1.2.7 - Open Redirect
CVSS 4.7
CVE-2023-48325
MEDIUM
PluginOps Landing Page Builder < 1.5.1.5 - Open Redirect
CVSS 4.7
CVE-2023-47779
MEDIUM
CRM Perks Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.4 - Open Redirect
CVSS 4.7
CVE-2023-49240
HIGH
Huawei EMUI and HarmonyOS - Unauthorized Access in Launcher Module
CVSS 7.5
CVE-2023-46688
MEDIUM
Pleasanter <1.3.47.0 - Open Redirect
CVSS 6.1
CVE-2023-48815
MEDIUM
kkFileView <4.3.0 - Info Disclosure
CVSS 6.1
CVE-2023-49281
MEDIUM
Calendarinho < 2023-10-11 - Open Redirect via Unvalidated URL
CVSS 4.7
CVE-2023-42502
MEDIUM
Apache Superset < 3.0.0 - Authenticated Open Redirect via HTTP Host Header Spoofing
CVSS 4.8
CVE-2023-47168
MEDIUM
Mattermost < 7.8.12 and 9.1.0-9.1.1 - Open Redirect via OAuth Redirect Parameter
CVSS 4.3
CVE-2023-49104
HIGH
owncloud/oauth2 < 0.6.1 - Open Redirect via Subdomain Validation Bypass
CVSS 8.7
CVE-2023-49061
MEDIUM
Firefox for iOS < 120.0 - HTML Template Injection via Reader Mode
CVSS 6.1
CVE-2023-5610
MEDIUM
Seraphinite Accelerator < 2.2.29 - Authenticated Open Redirect
CVSS 5.4
CVE-2023-5445
MEDIUM
McAfee ePolicy Orchestrator < 5.10.0 - Authenticated Open Redirect via Dashboard URL Parameter
CVSS 5.4
CVE-2023-41699
MEDIUM
Payara Server/Micro/Embedded 4.1.2.191-4.1.2.191.46, 5.0.0-5.57.0, 6.0.0-6.8.0, 6.2023.1-6.2023.11 Open Redirect
CVSS 6.1
CVE-2023-5986
HIGH
EcoStruxure Power Monitoring Expert - Open Redirect via URL-Encoded Input
CVSS 8.2
CVE-2023-45203
MEDIUM
Online Examination System 1.0 - Open Redirect via Login Page q Parameter
CVSS 6.1
CVE-2023-45202
MEDIUM
Online Examination System 1.0 - Open Redirect via Feed.php q Parameter
CVSS 6.1
CVE-2023-45201
MEDIUM
Online Examination System 1.0 - Open Redirect via Admin.php q Parameter
CVSS 6.1
CVE-2023-20264
MEDIUM
Cisco ASA & FTD Unauthenticated SAML Assertion Hijack via Login URL Manipulation
CVSS 6.1
CVE-2023-20886
HIGH
VMware Workspace ONE UEM 22.3.0.2-22.3.0.48 - Open Redirect via SAML Response
CVSS 8.8
Details
Vulnerabilities
1,526
Exploit Likelihood
Low