CWE-601

Low likelihood

URL Redirection to Untrusted Site ('Open Redirect')

Parent: CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

1,448 vulnerabilities with CWE-601
CVE-2025-20378 LOW
Splunk Enterprise <10.0.1-9.3.7-9.2.9 - Open Redirect
CVSS 3.1
CVE-2025-42924 MEDIUM
SAP S/4HANA - Open Redirect
CVSS 6.1
CVE-2025-42893 MEDIUM
SAP Business Connector - Open Redirect
CVSS 6.1
CVE-2025-64481 LOW
Pypi Datasette < 0.65.2 - Open Redirect
CVE-2025-63784 MEDIUM
Onlook web app <0.2.32 - Open Redirect
CVSS 6.5
CVE-2025-12789 MEDIUM
Red Hat Single Sign-On - Open Redirect
CVSS 6.1
CVE-2025-64116 MEDIUM
Leepeuker Movary < 0.69.0 - Open Redirect
CVSS 6.1
CVE-2025-64115 MEDIUM
Leepeuker Movary < 0.69.0 - Open Redirect
CVSS 6.1
CVE-2025-62266 MEDIUM
Liferay Digital Experience Platform < 7.4.3.110 - Open Redirect
CVSS 6.1
CVE-2025-50736 MEDIUM
Byaidu PDFMathTranslate <1.9.9 - Open Redirect
CVSS 6.1
CVE-2025-64101 HIGH
Zitadel < 2.71.18 - Open Redirect
CVSS 8.1
CVE-2025-62253 MEDIUM
Liferay Digital Experience Platform < 7.3 - Open Redirect
CVSS 6.1
CVE-2025-62981 MEDIUM
WP Gravity Forms Zoho CRM & Bigin <1.2.9 - Open Redirect
CVSS 4.7
CVE-2025-62716 HIGH
Plane <1.1.0 - XSS
CVSS 8.1
CVE-2025-10355 MEDIUM
MOLGENIS EMX2 <11.14.0 - Open Redirect
CVE-2025-60151 MEDIUM
WP Gravity Forms HubSpot <1.2.5 - Open Redirect
CVSS 4.7
CVE-2025-61753 MEDIUM
Oracle Scripting < 12.2.14 - Open Redirect
CVSS 6.1
CVE-2025-62595 MEDIUM
Koa < 3.0.3 - Open Redirect
CVSS 4.3
CVE-2025-62428 HIGH
Drawing-Captcha APP - Host Header Injection
CVE-2025-62407 MEDIUM
Frappe < 14.98.0 - Open Redirect
CVSS 6.1
CVE-2025-62379 LOW
Pypi Reflex - Open Redirect
CVSS 3.1
CVE-2025-54196 MEDIUM
Adobe Connect < 12.10 - Open Redirect
CVSS 4.3
CVE-2025-47890 LOW
Fortinet Fortios < 7.4.9 - Open Redirect
CVSS 2.6
CVE-2025-62361 MEDIUM
Wegia < 3.5.0 - Open Redirect
CVSS 6.1
CVE-2025-11167 MEDIUM
WordPress <2.5.6 - Open Redirect
CVSS 4.7
Details
Vulnerabilities 1,448
Exploit Likelihood Low