Fallos del tipo CWE-601

1187 resultados

Redirecionamento para URL não validada (Open Redirect)

A aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro GET/POST, referer, etc.) sem validar se o destino é confiável. Um atacante pode usar isso para levar vítimas a sites maliciosos, phishing ou roubo de credenciais, enquanto a URL legítima da sua app aparece no clique inicial.

Ejemplo

Um site de e-commerce redireciona após login com `redirect.php?url=google.com`. Um atacante envia `redirect.php?url=seusite-fake.com` disfarçado de e-mail de confirmação. A vítima clica, vê a URL legítima na barra de endereço até o redirecionamento, e cai em um fake convincente.

Cómo mitigar

Valide a URL de destino contra uma whitelist de domínios permitidos ou, no mínimo, verifique se o host da URL é o seu próprio domínio antes de redirecionar. Nunca redirecione para URLs externas fornecidas pelo usuário sem controle explícito.

CVE-2026-3318MEDIUMMultiple vulnerabilities in Cradle e-commerceEPSS 0.3%CVE-2026-67362MEDIUMJoomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5EPSS 0.3%CVE-2026-42259MEDIUMSaltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)EPSS 0.3%CVE-2026-40299MEDIUMnext-intl has an open redirect vulnerabilityEPSS 0.3%CVE-2026-55806MEDIUMDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007EPSS 0.3%CVE-2026-54770MEDIUMWebOb: Open redirect in Location header normalization via leading C0 control / space charactersEPSS 0.3%CVE-2024-23442MEDIUMKibana open redirect issueEPSS 0.3%CVE-2024-41801MEDIUMOpenProject packaged installation has Open Redirect Vulnerability in Sign-In in default configurationEPSS 0.3%CVE-2026-56697MEDIUMNuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtAppEPSS 0.3%CVE-2024-32078MEDIUMWordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerabilityEPSS 0.3%CVE-2026-95813MEDIUMe621ng before 26.09.16 Open Redirect via URL ParametersEPSS 0.3%CVE-2026-94216MEDIUMST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Header webserver authorize redirectEPSS 0.3%CVE-2026-55431HIGHCoder's session token leaked to arbitrary hosts via `coder open app` for external workspace appsEPSS 0.3%CVE-2024-51321HIGHIn Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-controlEPSS 0.3%CVE-2026-94214MEDIUMST Engineering iDirect Evolution/Velocity WebServer Evolution Management Service login.html redirectEPSS 0.3%CVE-2026-48856HIGHhttpc leaks Authorization header to cross-origin redirect targetsEPSS 0.3%CVE-2023-32218MEDIUMAvaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')EPSS 0.3%CVE-2026-12071MEDIUMTeamDavid: Header Injection leading to Open Redirect via URL-encoded charactersEPSS 0.3%CVE-2024-7941MEDIUMAn HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying theEPSS 0.3%CVE-2024-12990MEDIUMruifang-tech Rebuild Admin Verification Page admin-verify redirectEPSS 0.3%