Fallos del tipo CWE-601

1187 resultados

Redirecionamento para URL não validada (Open Redirect)

A aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro GET/POST, referer, etc.) sem validar se o destino é confiável. Um atacante pode usar isso para levar vítimas a sites maliciosos, phishing ou roubo de credenciais, enquanto a URL legítima da sua app aparece no clique inicial.

Ejemplo

Um site de e-commerce redireciona após login com `redirect.php?url=google.com`. Um atacante envia `redirect.php?url=seusite-fake.com` disfarçado de e-mail de confirmação. A vítima clica, vê a URL legítima na barra de endereço até o redirecionamento, e cai em um fake convincente.

Cómo mitigar

Valide a URL de destino contra uma whitelist de domínios permitidos ou, no mínimo, verifique se o host da URL é o seu próprio domínio antes de redirecionar. Nunca redirecione para URLs externas fornecidas pelo usuário sem controle explícito.

CVE-2024-4283MEDIUMURL Redirection to Untrusted Site ('Open Redirect') in GitLabEPSS 0.4%CVE-2026-47070MEDIUMHTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackneyEPSS 0.4%CVE-2025-7863MEDIUMthinkgem JeeSite ServletUtils.java redirectUrlEPSS 0.4%CVE-2022-26326MEDIUMPotential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2EPSS 0.4%CVE-2024-45981HIGHA host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction withEPSS 0.4%CVE-2026-22912MEDIUMImproper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to EPSS 0.4%CVE-2023-40306MEDIUMURL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)EPSS 0.4%CVE-2026-44598MEDIUMApache Shiro Jakarta EE module: Open redirect and SSRF (requires valid credentials)EPSS 0.4%CVE-2026-15093MEDIUMMultiple Vulnerabilities in IBM Engineering AI hub.EPSS 0.4%CVE-2023-31095MEDIUMWordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open RedirectionEPSS 0.4%CVE-2024-22244MEDIUMHarbor Open Redirect URLEPSS 0.4%CVE-2025-23086MEDIUMOn most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector EPSS 0.4%CVE-2022-41965MEDIUMOpencast Authenticated OpenRedirect VulnerabilityEPSS 0.4%CVE-2023-2000MEDIUMUnrestricted navigation due to unvalidated mattermost server redirectionEPSS 0.4%CVE-2025-54066MEDIUMDiracX-Web login page has Open Redirect vulnerabilityEPSS 0.4%CVE-2023-31237MEDIUMWordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open RedirectionEPSS 0.4%CVE-2026-56326MEDIUMNuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateToEPSS 0.4%CVE-2022-36028CRITICALBigBlueButton Greenlight Open Redirect vulnerabilityEPSS 0.4%CVE-2022-27861MEDIUMWordPress Ninja Popups Plugin <= 4.7.5 is vulnerable to Open RedirectionEPSS 0.4%CVE-2025-2697HIGHIBM Cognos Command Center HTTP Open RedirectEPSS 0.4%