CWE-601
Low likelihoodURL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
1,530 vulnerabilities with CWE-601
CVE-2019-4166
MEDIUM
IBM StoredIQ 7.6.0.0-7.6.0.17 - Open Redirect
CVSS 6.1
CVE-2019-3788
HIGH
Cloud Foundry UAA Release < 71.0 - Unauthenticated Open Redirect via Wildcard Subdomain
CVSS 8.7
CVE-2019-10955
MEDIUM
Rockwell Automation MicroLogix and CompactLogix - Unauthenticated Open Redirect
CVSS 6.1
CVE-2019-4092
MEDIUM
IBM Content Navigator 2.0.3 and 3.0CD - Open Redirect via Crafted URL
CVSS 6.1
CVE-2019-8995
MEDIUM
TIBCO ActiveMatrix BPM and Silver Fabric Enabler <= 4.2.0 - Open Redirect via Workspace Client
CVSS 6.1
CVE-2019-11016
MEDIUM
Elgg < 1.12.18 and 2.3.x < 2.3.11 - Open Redirect
CVSS 6.1
CVE-2019-10856
MEDIUM
Jupyter Notebook < 5.7.8 - Open Redirect via Empty Netloc
CVSS 6.1
CVE-2019-10255
MEDIUM
JupyterHub < 0.9.5 and Jupyter Notebook < 5.7.7 - Open Redirect via Login Page
CVSS 6.1
CVE-2019-3877
MEDIUM
mod_auth_mellon < 0.14.2 - Open Redirect via Backslash URL Bypass
CVSS 5.8
CVE-2019-3850
MEDIUM
moodle < 3.1.17 - Open Redirect via Assignment Submission Comment Links
CVSS 4.3
CVE-2019-4035
MEDIUM
IBM Content Navigator 3.0CD - Open Redirect via Edit Client
CVSS 5.4
CVE-2019-9915
MEDIUM
GetSimpleCMS 3.3.13 - Open Redirect
CVSS 6.1
CVE-2019-9837
MEDIUM
Doorkeeper::OpenidConnect <1.5.4 - Open Redirect
CVSS 6.1
CVE-2019-7416
MEDIUM
OpenText Documentum Webtop 5.3 SP2 - XSS
CVSS 6.1
CVE-2019-3778
MEDIUM
Spring Security OAuth < 2.0.17 - Open Redirect via Authorization Endpoint
CVSS 6.5
CVE-2019-0540
MEDIUM
Microsoft Office - URL Redirection to Untrusted Site via Unvalidated URLs
CVSS 5.5
CVE-2019-5915
MEDIUM
OpenAM 13.0 - Open Redirect via Crafted Page
CVSS 6.1
CVE-2019-3912
MEDIUM
LabKey Server Community Edition < 18.3.0-61806.763 - Unauthenticated Open Redirect via /__r1/ returnURL Parameter
CVSS 6.1
CVE-2019-6780
MEDIUM
Wise Chat < 2.7 - Open Redirect via External Link Handling
CVSS 6.1
CVE-2018-25245
HIGH
7 Tik 1.0.1.0 Denial of Service via Search
CVSS 7.5
CVE-2018-25091
MEDIUM
urllib3 < 1.24.2 - Unauthenticated Credential Exposure via Cross-Origin Redirect
CVSS 6.1
CVE-2018-18288
MEDIUM
CrushFTP <= 8.3.0 - Credential Theft via Open Redirect
CVSS 6.1
CVE-2018-1002102
LOW
Kubernetes < 1.14.0 - URL Redirection to Untrusted Site via Kubelet Streaming Endpoints
CVSS 2.6
CVE-2018-13257
MEDIUM
Blackboard Learn - Open Redirect via HTTP Host Header Spoofing
CVSS 6.1
CVE-2018-20929
MEDIUM
cPanel < 62.0.42 - Open Redirect via /unprotected/redirect.html Endpoint
CVSS 6.1
Details
Vulnerabilities
1,530
Exploit Likelihood
Low