CWE-601

The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause lau

Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability al

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

Nextcloud talk is a self hosting messaging service. In versions prior 12.1.2 an attacker is able to control the link of

An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab

SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect use

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a ma

An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4,

SAP NetWeaver ABAP Server and ABAP Platform allows an unauthenticated attacker to redirect users to a malicious site due

An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, an

mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Version

Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" reques

Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone that are dependent on Products

Nextcloud Talk is a video and audio conferencing app for Nextcloud, a self-hosted productivity platform. Prior to versio

An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploite

The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied

A URL disclosure issue was discovered in Burp Suite before 2022.6. If a user views a crafted response in the Repeater or

Due to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management - version 1100, an attacker can

Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2

Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are

A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the f

An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior

Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect

The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value

Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS

Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-App

Next.js is an open source website development framework to be used with the React library. In affected versions speciall

Redash is a package for data visualization and sharing. In Redash version 10.0 and prior, the implementation of Google L

Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to

Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Products.isurlinportal prior to 1

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions before 1.6.2 d

Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could ca

Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for ope

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attack

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes ca

Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg

A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbi

In JetBrains Hub before 2020.1.12629, an open redirect was possible.

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redi

SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated at

SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and O

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Sp

On BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x before 14.1.2.5, 13.1.x be

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated open

Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.