Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-06-09 | CVE-2020-1323 | Open Redirect vulnerability in Microsoft Sharepoint Enterprise Server and Sharepoint Server An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'. | 6.1 |
| 2020-06-09 | CVE-2020-1220 | Open Redirect vulnerability in Microsoft Edge A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability'. | 6.1 |
| 2020-06-02 | CVE-2020-10959 | Open Redirect vulnerability in Mediawiki resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page. | 6.1 |
| 2020-05-25 | CVE-2020-13486 | Open Redirect vulnerability in Verbb Knock The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. | 6.1 |
| 2020-05-21 | CVE-2020-1059 | Open Redirect vulnerability in Microsoft Edge A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka 'Microsoft Edge Spoofing Vulnerability'. | 4.3 |
| 2020-05-16 | CVE-2020-13121 | Open Redirect vulnerability in Rcos Submitty Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt. | 6.1 |
| 2020-05-14 | CVE-2020-5409 | Open Redirect vulnerability in Pivotal Software Concourse Pivotal Concourse, most versions prior to 6.0.0, allows redirects to untrusted websites in its login flow. | 6.1 |
| 2020-05-13 | CVE-2020-1997 | Open Redirect vulnerability in Paloaltonetworks Pan-Os An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway. | 6.1 |
| 2020-05-13 | CVE-2020-12699 | Open Redirect vulnerability in DKD Direct Mail The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl. | 6.1 |
| 2020-05-07 | CVE-2020-11053 | Open Redirect vulnerability in Oauth2 Proxy Project Oauth2 Proxy In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. | 6.1 |