Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2022-12-25 CVE-2020-36627 Open Redirect vulnerability in Go-Macaron I18N
A vulnerability was found in Macaron i18n.
network
low complexity
go-macaron CWE-601
6.1
2022-12-22 CVE-2022-29910 Open Redirect vulnerability in Mozilla Firefox
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Firefox for Android.
network
low complexity
mozilla CWE-601
6.1
2022-12-22 CVE-2022-29912 Open Redirect vulnerability in Mozilla Thunderbird
Requests initiated through reader mode did not properly omit cookies with a SameSite attribute.
network
low complexity
mozilla CWE-601
6.1
2022-12-22 CVE-2022-34474 Open Redirect vulnerability in Mozilla Firefox
Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the redirect and prompt the user as appropriate.
network
low complexity
mozilla CWE-601
6.1
2022-12-22 CVE-2022-36316 Open Redirect vulnerability in Mozilla Firefox
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect.
network
low complexity
mozilla CWE-601
6.1
2022-12-22 CVE-2022-45413 Open Redirect vulnerability in Mozilla Firefox
Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.<br>*This issue only affects Firefox for Android.
network
low complexity
mozilla CWE-601
6.1
2022-12-22 CVE-2022-4644 Open Redirect vulnerability in Ikus-Soft Rdiffweb
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
network
low complexity
ikus-soft CWE-601
6.1
2022-12-19 CVE-2022-44488 Open Redirect vulnerability in Adobe Experience Manager
Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability.
network
low complexity
adobe CWE-601
5.4
2022-12-19 CVE-2021-4260 Open Redirect vulnerability in Oils-Js Project Oils-Js
A vulnerability was found in oils-js.
network
low complexity
oils-js-project CWE-601
6.1
2022-12-19 CVE-2022-38662 Open Redirect vulnerability in Hcltech HCL Digital Experience 8.5/9.0/9.5
 In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.
network
low complexity
hcltech CWE-601
6.1