Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-08-22 | CVE-2021-3639 | Open Redirect vulnerability in Uninett MOD Auth Mellon A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. | 6.1 |
2022-08-16 | CVE-2022-25799 | Open Redirect vulnerability in Cert Vince 1.48.0/1.49.0 An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. | 6.1 |
2022-08-12 | CVE-2022-35953 | Open Redirect vulnerability in Joinbookwyrm Bookwyrm BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next. | 6.1 |
2022-08-11 | CVE-2022-28755 | Open Redirect vulnerability in Zoom The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. | 6.1 |
2022-08-05 | CVE-2022-31657 | Open Redirect vulnerability in VMWare products VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. | 9.8 |
2022-08-02 | CVE-2021-23385 | Open Redirect vulnerability in Flask-Security Project Flask-Security This affects all versions of package Flask-Security. | 6.1 |
2022-08-01 | CVE-2022-31193 | Open Redirect vulnerability in Duraspace Dspace DSpace open source software is a repository application which provides durable access to digital resources. | 6.1 |
2022-07-28 | CVE-2022-27509 | Open Redirect vulnerability in Citrix Application Delivery Controller Firmware and Gateway Unauthenticated redirection to a malicious website | 6.1 |
2022-07-26 | CVE-2022-30706 | Open Redirect vulnerability in Twinkletoessoftware Booked Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL. | 6.1 |
2022-07-25 | CVE-2022-35652 | Open Redirect vulnerability in multiple products An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature. | 6.1 |