Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2021-04-27 CVE-2020-21998 Open Redirect vulnerability in Homeautomation Project Homeautomation 3.3.2
In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users.
network
low complexity
homeautomation-project CWE-601
6.1
2021-04-27 CVE-2021-28125 Open Redirect vulnerability in Apache Superset
Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious.
network
low complexity
apache CWE-601
6.1
2021-04-12 CVE-2021-21392 Open Redirect vulnerability in multiple products
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).
network
low complexity
matrix fedoraproject CWE-601
6.3
2021-04-05 CVE-2021-24210 Open Redirect vulnerability in Kiboit Phastpress
There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page.
network
low complexity
kiboit CWE-601
6.1
2021-04-05 CVE-2021-24165 Open Redirect vulnerability in Ninjaforms Ninja Forms
In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a user supplied redirect parameter and no protection in place.
network
low complexity
ninjaforms CWE-601
6.1
2021-04-02 CVE-2020-9995 Open Redirect vulnerability in Apple Macos Server
An issue existed in the parsing of URLs.
network
low complexity
apple CWE-601
6.1
2021-04-02 CVE-2021-29652 Open Redirect vulnerability in Pomerium
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
network
low complexity
pomerium CWE-601
6.1
2021-04-02 CVE-2021-29651 Open Redirect vulnerability in Pomerium
Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).
network
low complexity
pomerium CWE-601
6.1
2021-03-31 CVE-2020-24550 Open Redirect vulnerability in Episerver Find 13.2.6
An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the _t_redirect parameter in a crafted URL, such as a /find_v2/_click URL.
network
low complexity
episerver CWE-601
6.1
2021-03-29 CVE-2021-27352 Open Redirect vulnerability in Ilch CMS 2.1.42
An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.
network
low complexity
ilch CWE-601
5.4