Vulnerabilities > URL Redirection to Untrusted Site ('Open Redirect')

DATE CVE VULNERABILITY TITLE RISK
2024-01-15 CVE-2024-0319 Open Redirect vulnerability in Fireeye Hxtool 4.6
Open Redirect vulnerability in FireEye HXTool affecting version 4.6, the exploitation of which could allow an attacker to redirect a legitimate user to a malicious page by changing the 'redirect_uri' parameter.
network
low complexity
fireeye CWE-601
6.1
2024-01-15 CVE-2024-0545 Open Redirect vulnerability in Fairsketch Rise Ultimate Project Manager 3.5.3
A vulnerability classified as problematic was found in CodeCanyon RISE Rise Ultimate Project Manager 3.5.3.
network
low complexity
fairsketch CWE-601
6.1
2024-01-10 CVE-2023-49394 Open Redirect vulnerability in Easycorp Zentao
Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly.
network
low complexity
easycorp CWE-601
6.1
2024-01-09 CVE-2024-21734 Open Redirect vulnerability in SAP Marketing 160
SAP Marketing (Contacts App) - version 160, allows an attacker with low privileges to trick a user to open malicious page which could lead to a very convincing phishing attack with low impact on confidentiality and integrity of the application.
network
low complexity
sap CWE-601
5.4
2024-01-08 CVE-2023-6552 Open Redirect vulnerability in Tasmoadmin
Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.
network
low complexity
tasmoadmin CWE-601
6.1
2024-01-05 CVE-2024-21641 Open Redirect vulnerability in Flarum
Flarum is open source discussion platform software.
network
low complexity
flarum CWE-601
4.7
2024-01-03 CVE-2023-50345 Open Redirect vulnerability in Hcltech Dryice Myxalytics 5.9/6.0/6.1
HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.
network
low complexity
hcltech CWE-601
6.1
2024-01-02 CVE-2023-26159 Open Redirect vulnerability in Follow-Redirects Follow Redirects
Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function.
network
low complexity
follow-redirects CWE-601
6.1
2023-12-30 CVE-2023-52263 Open Redirect vulnerability in Brave Browser
Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect.
network
low complexity
brave CWE-601
6.1
2023-12-29 CVE-2023-51517 Open Redirect vulnerability in Codepeople Calculated Fields Form
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28.
network
low complexity
codepeople CWE-601
5.4