Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2023-05-09 CVE-2023-25829 Open Redirect vulnerability in Esri Portal for Arcgis 10.9.1/11.0
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and 10.9.1 that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
network
low complexity
esri CWE-601
6.1
2023-05-09 CVE-2023-31134 Open Redirect vulnerability in Tauri
Tauri is software for building applications for multi-platform deployment.
network
low complexity
tauri CWE-601
5.4
2023-05-08 CVE-2020-21038 Open Redirect vulnerability in Typecho 1.117.10.30
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.
network
low complexity
typecho CWE-601
6.1
2023-05-03 CVE-2022-43950 Open Redirect vulnerability in Fortinet Fortinac and Fortinac-F
A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.
network
low complexity
fortinet CWE-601
4.7
2023-05-03 CVE-2023-0155 Open Redirect vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1.
network
low complexity
gitlab CWE-601
5.4
2023-05-02 CVE-2023-2000 Open Redirect vulnerability in Mattermost Desktop
Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website
network
low complexity
mattermost CWE-601
5.4
2023-04-30 CVE-2015-10104 Open Redirect vulnerability in Woocommerce Icons for Features 1.0.0
A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress.
network
low complexity
woocommerce CWE-601
6.1
2023-04-26 CVE-2023-22729 Open Redirect vulnerability in Silverstripe Framework
Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system.
network
low complexity
silverstripe CWE-601
6.1
2023-04-24 CVE-2023-26494 Open Redirect vulnerability in Thethingsnetwork Lorawan-Stack
lorawan-stack is an open source LoRaWAN network server.
network
low complexity
thethingsnetwork CWE-601
6.1
2023-04-17 CVE-2015-10102 Open Redirect vulnerability in Freshworks Freshdesk 1.7
A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress.
network
low complexity
freshworks CWE-601
6.1