Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2020-04-07 CVE-2020-11515 Open Redirect vulnerability in Rankmath SEO
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint.
network
low complexity
rankmath CWE-601
6.1
2020-04-04 CVE-2020-11529 Open Redirect vulnerability in Getgrav Grav
Common/Grav.php in Grav before 1.7 has an Open Redirect.
network
getgrav CWE-601
5.8
2020-04-03 CVE-2020-8143 Open Redirect vulnerability in Revive-Adserver Revive Adserver
An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144.
5.8
2020-04-02 CVE-2020-1927 Open Redirect vulnerability in multiple products
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
6.1
2020-03-20 CVE-2019-19484 Open Redirect vulnerability in Centreon
Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and execute unintended behavior.
network
low complexity
centreon CWE-601
6.1
2020-03-18 CVE-2019-14882 Open Redirect vulnerability in Moodle
A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.
network
moodle CWE-601
5.8
2020-03-16 CVE-2019-19613 Open Redirect vulnerability in Halvotec Raquest 10.23.10801.0
An issue was discovered in Halvotec RaQuest 10.23.10801.0.
4.3
2020-03-15 CVE-2019-6696 Open Redirect vulnerability in Fortinet Fortios
An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage.
network
fortinet CWE-601
5.8
2020-02-28 CVE-2020-6803 Open Redirect vulnerability in Mozilla Webthings Gateway
An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.
network
mozilla CWE-601
5.8
2020-02-24 CVE-2019-4595 Open Redirect vulnerability in IBM Sterling B2B Integrator 5.2.0.0/5.2.6.36/5.2.6.5
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
network
ibm CWE-601
5.8