Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2021-07-05 CVE-2021-23401 Open Redirect vulnerability in Flask-User Project Flask-User
This affects all versions of package Flask-User.
5.8
2021-07-02 CVE-2021-34807 Open Redirect vulnerability in Zimbra Collaboration
An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0.
network
zimbra CWE-601
5.8
2021-07-02 CVE-2020-23182 Open Redirect vulnerability in PHP-Fusion 9.03.60
The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel.
4.9
2021-06-29 CVE-2021-32721 Open Redirect vulnerability in Powermux Project Powermux 1.0.0/1.1.0
PowerMux is a drop-in replacement for Go's http.ServeMux.
5.8
2021-06-29 CVE-2021-20105 Open Redirect vulnerability in Machform
Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.
network
low complexity
machform CWE-601
6.1
2021-06-28 CVE-2021-34254 Open Redirect vulnerability in Umbraco CMS
Umbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization on booting.aspx.
network
umbraco CWE-601
5.8
2021-06-24 CVE-2021-25655 Open Redirect vulnerability in Avaya Aura Experience Portal 7.1/8.0.0
A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack.
network
avaya CWE-601
5.8
2021-06-23 CVE-2020-18660 Open Redirect vulnerability in Get-Simple Getsimplecms 3.3.13
GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.
5.8
2021-06-22 CVE-2010-4266 Open Redirect vulnerability in Vanillaforums Vanilla Forums
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.
5.8
2021-06-22 CVE-2021-35206 Open Redirect vulnerability in Gitpod
Gitpod before 0.6.0 allows unvalidated redirects.
network
gitpod CWE-601
5.8