Fallos del tipo CWE-601

1184 resultados

Redirecionamento para URL não validada (Open Redirect)

A aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro GET/POST, referer, etc.) sem validar se o destino é confiável. Um atacante pode usar isso para levar vítimas a sites maliciosos, phishing ou roubo de credenciais, enquanto a URL legítima da sua app aparece no clique inicial.

Ejemplo

Um site de e-commerce redireciona após login com `redirect.php?url=google.com`. Um atacante envia `redirect.php?url=seusite-fake.com` disfarçado de e-mail de confirmação. A vítima clica, vê a URL legítima na barra de endereço até o redirecionamento, e cai em um fake convincente.

Cómo mitigar

Valide a URL de destino contra uma whitelist de domínios permitidos ou, no mínimo, verifique se o host da URL é o seu próprio domínio antes de redirecionar. Nunca redirecione para URLs externas fornecidas pelo usuário sem controle explícito.

CVE-2023-25734HIGHAfter downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to EPSS 0.8%CVE-2024-10908MEDIUMOpen Redirect in lm-sys/fastchatEPSS 0.8%CVE-2022-21651MEDIUMOpen redirect in shopwareEPSS 0.8%CVE-2020-15242MEDIUMOpen Redirect in Next.jsEPSS 0.8%CVE-2021-3989MEDIUMOpen Redirect in star7th/showdocEPSS 0.8%CVE-2024-13888HIGHWPMobile.App <= 11.56 - Open Redirect via 'redirect' ParameterEPSS 0.8%CVE-2026-47645HIGHMicrosoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2020-5337MEDIUMRSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL redirection vulnerability. A remote unauthenticated attacker could potentiallyEPSS 0.8%CVE-2023-39364LOWOpen redirect in change password functionality in CactiEPSS 0.7%CVE-2024-8021MEDIUMOpen Redirect in gradio-app/gradioEPSS 0.7%CVE-2022-24794HIGHOpen Redirect in express-openid-connectEPSS 0.7%CVE-2017-11482—The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open rediEPSS 0.7%CVE-2022-20794MEDIUMCisco TelePresence Collaboration Endpoint and RoomOS Software VulnerabilitiesEPSS 0.7%CVE-2017-20119LOWTrueConf Server change-lang redirectEPSS 0.7%CVE-2021-40852MEDIUMTCMAN GIM open redirect vulnerabilityEPSS 0.7%CVE-2022-1209MEDIUMUltimate Member <= 2.3.1 - Arbitrary RedirectEPSS 0.7%CVE-2022-0868HIGHOpen Redirect in medialize/uri.jsEPSS 0.7%CVE-2005-10001MEDIUMNetegrity SiteMinder Login smpwservicescgi.exe redirectEPSS 0.7%CVE-2022-31151LOWUncleared cookies on cross-host/cross-origin redirect in undiciEPSS 0.7%CVE-2026-41106CRITICALMicrosoft 365 Copilot Elevation of Privilege VulnerabilityEPSS 0.7%