URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

CVEs (1,578)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-45105 1Servit 1Affiliate Toolkit Jun 17, 2026 Dec 19, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a th...Show more URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SERVIT Software Solutions affiliate-toolkit – WordPress Affiliate Plugin.This issue affects affiliate-toolkit – WordPress Affiliate Plugin: from n/a through 3.3.9.Show less
CVE-2023-41648 1Swapnilpatil 1Login And Logout Redirect Jun 17, 2026 Dec 19, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Swapnil V. Patil Login and Logout Redirect.This issue affects Login and Logout Redirect: from n/a through 2.0.3.
CVE-2023-40602 1Doofinder 1Doofinder Jun 17, 2026 Dec 19, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Doofinder Doofinder WP & WooCommerce Search.This issue affects Doofinder WP & WooCommerce Search: from n/a through 1.5.49.
CVE-2023-38481 1Crmperks 1Integration For Woocommerce And Zoho Crm, Books, Invoice, Inventory, Bigin Jun 17, 2026 Dec 19, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books...Show more URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7.Show less
CVE-2023-38478 1Crmperks 1Integration For Woocommerce And Quickbooks Jun 17, 2026 Dec 19, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3.
CVE-2023-6927 1Redhat 2Keycloak Single Sign On Jun 17, 2026 Dec 18, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security pat...Show more A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.Show less
CVE-2020-17484 1Uffizio 1Gps Tracker Jun 17, 2026 Dec 16, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.
CVE-2023-6545 1Beckhoff 1Authelia Bhf Jun 17, 2026 Dec 14, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does so...Show more The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site. This may have limited impact to integrity and does solely affect anthelia-bhf the Beckhoff fork of authelia.Show less
CVE-2023-46750 1Apache 1Shiro Jun 17, 2026 Dec 14, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
CVE-2023-5629 1Schneider Electric 16Eb450 Firmware Eb45e FirmwareEh450 Firmware+13 more Jun 17, 2026 Dec 14, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of information through phishing attempts over HTTP.
CVE-2023-50771 1Jenkins 1Openid Connect Authentication Jun 17, 2026 Dec 13, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
CVE-2023-6380 1Alkacon 1Opencms Jun 17, 2026 Dec 13, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them...Show more Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them to a malicious site and compromise them. Exploitation of this vulnerability is possible due to the fact that there is no proper sanitization of the 'URI' parameter.Show less
CVE-2023-50456 1Zammad 1Zammad Jun 17, 2026 Dec 10, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name.
CVE-2023-28874 1Seafile 1Seafile Jun 17, 2026 Dec 9, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
CVE-2023-48928 1Franklin Electric 1System Sentinel Anyware Jun 17, 2026 Dec 8, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect. The 'path' parameter of the prefs.asp resource allows an attacker to redirect a victim user to an arbitrary web si...Show more Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect. The 'path' parameter of the prefs.asp resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.Show less
CVE-2023-47548 1Softlabbd 1Integrate Google Drive Jun 17, 2026 Dec 7, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.Thi...Show more URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site: from n/a through 1.3.2.Show less
CVE-2023-45762 1Michaeluno 1Responsive Column Widgets Jun 17, 2026 Dec 7, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Michael Uno (miunosoft) Responsive Column Widgets.This issue affects Responsive Column Widgets: from n/a through 1.2.7.
CVE-2023-48325 1Pluginops 1Landing Page Builder Jun 17, 2026 Dec 7, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages.This issue affects Landing Page Builder – Lead Page –...Show more URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages.This issue affects Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages: from n/a through 1.5.1.5.Show less
CVE-2023-47779 1Crmperks 1Integration For Constant Contact And Contact Form 7, Wpforms, Elementor, Ninja Jun 17, 2026 Dec 7, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and...Show more URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.1.4.Show less
CVE-2023-49240 1Huawei 2Emui Harmonyos Jun 17, 2026 Dec 6, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality.

Previous 1...353637...79 Next