Fallos del tipo CWE-601

1190 resultados

Redirecionamento para URL não validada (Open Redirect)

A aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro GET/POST, referer, etc.) sem validar se o destino é confiável. Um atacante pode usar isso para levar vítimas a sites maliciosos, phishing ou roubo de credenciais, enquanto a URL legítima da sua app aparece no clique inicial.

Ejemplo

Um site de e-commerce redireciona após login com `redirect.php?url=google.com`. Um atacante envia `redirect.php?url=seusite-fake.com` disfarçado de e-mail de confirmação. A vítima clica, vê a URL legítima na barra de endereço até o redirecionamento, e cai em um fake convincente.

Cómo mitigar

Valide a URL de destino contra uma whitelist de domínios permitidos ou, no mínimo, verifique se o host da URL é o seu próprio domínio antes de redirecionar. Nunca redirecione para URLs externas fornecidas pelo usuário sem controle explícito.

CVE-2025-67502MEDIUMTaguette does not safeguard against Open RedirectEPSS 0.3%CVE-2026-63094HIGHSigNoz < 0.134.0 SSO OAuth State Manipulation Session Token TheftEPSS 0.3%CVE-2025-15112MEDIUMKsenia Security lares Home Automation 1.6 URL Redirection VulnerabilityEPSS 0.3%CVE-2026-28413MEDIUMProducts.isurlinportal: Possible open redirect when using more than 2 forward slashesEPSS 0.3%CVE-2026-40181MEDIUMReact Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationEPSS 0.3%CVE-2026-45307MEDIUMSpeakr: Open redirect in is_safe_url via parser mismatch on next parameterEPSS 0.3%CVE-2026-45566MEDIUMRoxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypassEPSS 0.3%CVE-2026-83320HIGHVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are EPSS 0.3%CVE-2026-47883MEDIUMSpring Framework Open Redirect in UrlHandlerFilterEPSS 0.3%CVE-2024-42930MEDIUMPbootCMS 3.2.8 is vulnerable to URL Redirect.EPSS 0.3%CVE-2025-24740MEDIUMWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-86351MEDIUMMISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URLEPSS 0.3%CVE-2026-27736MEDIUMBigBlueButton has Open Redirect vulnerability in ApiControllerEPSS 0.3%CVE-2025-61782MEDIUMOpen Redirect in OpenCTI's SAML Authentication FlowEPSS 0.3%CVE-2024-50463MEDIUMWordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerabilityEPSS 0.3%CVE-2020-36845MEDIUMThe KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination UREPSS 0.3%CVE-2024-49682MEDIUMWordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-40080MEDIUMCacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirectEPSS 0.3%CVE-2024-43794MEDIUMOpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirectEPSS 0.3%CVE-2026-35404MEDIUMOpen edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url ParameterEPSS 0.3%