CWE-601

Low likelihood

URL Redirection to Untrusted Site ('Open Redirect')

Parent: CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

1,448 vulnerabilities with CWE-601
CVE-2025-52219 MEDIUM
Selectzero < 2025.5.2 - Open Redirect
CVSS 6.5
CVE-2025-43767 MEDIUM
Liferay Digital Experience Platform < 2024.Q1.13 - Open Redirect
CVSS 6.1
CVE-2025-57800 HIGH
Audiobookshelf <2.26.3 - Open Redirect
CVSS 8.8
CVE-2025-55625 MEDIUM
Reolink v4.54.0.4.20250526 - Open Redirect
CVSS 6.3
CVE-2025-55624 MEDIUM
Reolink <4.54.0.4.20250526 - SSRF
CVSS 5.3
CVE-2025-55751 MEDIUM
OnboardLite - Open Redirect
CVE-2025-7777 MEDIUM
Mirror-Registry - Open Redirect
CVSS 6.5
CVE-2025-55706 MEDIUM
Movable Type - Open Redirect
CVSS 4.3
CVE-2025-9193 LOW
TOTVS Portal Meu RH <12.1.17 - Open Redirect
CVSS 3.5
CVE-2025-55032 MEDIUM
Focus for iOS < 142 - XSS
CVSS 6.1
CVE-2025-55031 CRITICAL
Firefox for iOS < 142 - SSRF
CVSS 9.8
CVE-2025-54145 CRITICAL
Mozilla Firefox < 141.0 - Open Redirect
CVSS 9.1
CVE-2025-54144 MEDIUM
Mozilla Firefox < 141.0 - Open Redirect
CVSS 5.4
CVE-2025-8066 MEDIUM
Bunkerity Bunker Web <1.6.2 - Open Redirect
CVE-2025-55207 MEDIUM
Astro <9.4.1 - Open Redirect
CVE-2025-54681 MEDIUM
CRM Perks Connector - Open Redirect
CVSS 4.7
CVE-2025-55166 MEDIUM
savg-sanitizer <0.22.0 - XSS
CVE-2025-8813 LOW
Pybbs < 6.0.0 - Open Redirect
CVSS 3.5
CVE-2025-8737 LOW
zlt2000 microservices-platform <6.0.0 - Open Redirect
CVSS 3.5
CVE-2025-54793 MEDIUM
Astro < 5.12.7 - Open Redirect
CVSS 6.1
CVE-2025-2824 HIGH
IBM Operational Decision Manager - Open Redirect
CVSS 7.4
CVE-2025-50578 CRITICAL
LinuxServer.io heimdall 2.6.3-ls307 - Host Header Injection and Open Redirect
CVSS 9.8
CVE-2025-52897 MEDIUM
Glpi < 10.0.19 - Basic XSS
CVSS 6.5
CVE-2025-54414 MEDIUM
Anubis <1.21.2 - XSS
CVE-2025-8129 LOW
Koa < 2.16.2 - Open Redirect
CVSS 3.5
Details
Vulnerabilities 1,448
Exploit Likelihood Low