Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2024-01-09 CVE-2024-21734 Open Redirect vulnerability in SAP Marketing 160
SAP Marketing (Contacts App) - version 160, allows an attacker with low privileges to trick a user to open malicious page which could lead to a very convincing phishing attack with low impact on confidentiality and integrity of the application.
network
low complexity
sap CWE-601
5.4
2024-01-08 CVE-2023-6552 Open Redirect vulnerability in Tasmoadmin
Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.
network
low complexity
tasmoadmin CWE-601
6.1
2024-01-05 CVE-2024-21641 Open Redirect vulnerability in Flarum
Flarum is open source discussion platform software.
network
low complexity
flarum CWE-601
4.7
2024-01-03 CVE-2023-50345 Open Redirect vulnerability in Hcltech Dryice Myxalytics 5.9/6.0/6.1
HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.
network
low complexity
hcltech CWE-601
6.1
2024-01-02 CVE-2023-26159 Open Redirect vulnerability in Follow-Redirects Follow Redirects
Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function.
network
low complexity
follow-redirects CWE-601
6.1
2023-12-30 CVE-2023-52263 Open Redirect vulnerability in Brave Browser
Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect.
network
low complexity
brave CWE-601
6.1
2023-12-29 CVE-2023-51517 Open Redirect vulnerability in Codepeople Calculated Fields Form
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28.
network
low complexity
codepeople CWE-601
5.4
2023-12-29 CVE-2023-51675 Open Redirect vulnerability in Vasyltech Advanced Access Manager
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18.
network
low complexity
vasyltech CWE-601
5.4
2023-12-29 CVE-2023-28786 Open Redirect vulnerability in Solidwp Solid Security
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.This issue affects Solid Security – Password, Two Factor Authentication, and Brute Force Protection: from n/a through 8.1.4.
network
low complexity
solidwp CWE-601
6.1
2023-12-29 CVE-2023-31095 Open Redirect vulnerability in Crmperks Database for Contact Form 7, Wpforms, Elementor Forms
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8.
network
low complexity
crmperks CWE-601
6.1