CWE-601

A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects

An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability,

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user t

An issue was discovered in WSO2 Identity Server through 5.10.0 and WSO2 IS as Key Manager through 5.10.0. An open redire

An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page ca

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5, when used as an OAuth 2.0 service provider.

The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. Th

Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web

The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers

An issue was discovered in Verint Impact 360 15.1. At wfo/control/signin, the rd parameter can accept a URL, to which us

In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik

IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect a

Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbitrary site

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of com_content leads to a

NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attacke

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary websi

A vulnerability in the web interface of Cisco Managed Services Accelerator (MSX) could allow an unauthenticated, remote

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the down

ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite from version 0.30.2 and before versio

ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite before version 0.34.1, the OAuth 2.0

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to red

SAP NetWeaver AS Java, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, Start Page allows an unauthenticated remote

In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document.

Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it i

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and

SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the application URL leading to

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restri

Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious we

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications

IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack

In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, an u

Autobahn|Python before 20.12.3 allows redirect header injection.

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an atta

In affected versions of WordPress, due to an issue in wp_validate_redirect() and URL sanitization, an arbitrary external

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent W

An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site a

SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due t

An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to spec

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to r

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an O

A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Updat

Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the t

TYPO3 Fluid Engine (package `typo3fluid/fluid`) before versions 2.0.5, 2.1.4, 2.2.1, 2.3.5, 2.4.1, 2.5.5 or 2.6.1 is vul

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information