Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2023-12-16 CVE-2020-17484 Open Redirect vulnerability in Uffizio GPS Tracker
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.
network
low complexity
uffizio CWE-601
6.1
2023-12-14 CVE-2023-6545 Open Redirect vulnerability in Beckhoff Authelia-Bhf
The package authelia-bhf included in Beckhoffs TwinCAT/BSD is prone to an open redirect that allows a remote unprivileged attacker to redirect a user to another site.
network
low complexity
beckhoff CWE-601
4.7
2023-12-14 CVE-2023-46750 Open Redirect vulnerability in Apache Shiro
URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
network
low complexity
apache CWE-601
6.1
2023-12-14 CVE-2023-5629 Open Redirect vulnerability in Schneider-Electric products
A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of information through phishing attempts over HTTP.
network
low complexity
schneider-electric CWE-601
6.1
2023-12-13 CVE-2023-50771 Open Redirect vulnerability in Jenkins Openid
Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
network
low complexity
jenkins CWE-601
6.1
2023-12-13 CVE-2023-6380 Open Redirect vulnerability in Alkacon Opencms 14.0.0/15.0.0
Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template.
network
low complexity
alkacon CWE-601
6.1
2023-12-09 CVE-2023-28874 Open Redirect vulnerability in Seafile 9.0.6
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
network
low complexity
seafile CWE-601
6.1
2023-12-08 CVE-2023-48928 Open Redirect vulnerability in Franklin-Electric System Sentinel Anyware 1.6.24.492
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect.
network
low complexity
franklin-electric CWE-601
6.1
2023-12-07 CVE-2023-45762 Open Redirect vulnerability in Michaeluno Responsive Column Widgets
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Michael Uno (miunosoft) Responsive Column Widgets.This issue affects Responsive Column Widgets: from n/a through 1.2.7.
network
low complexity
michaeluno CWE-601
6.1
2023-12-07 CVE-2023-47548 Open Redirect vulnerability in Softlabbd Integrate Google Drive
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site: from n/a through 1.3.2.
network
low complexity
softlabbd CWE-601
6.1