Falhas do tipo CWE-601

1.185 resultados

Redirecionamento aberto (Open Redirect)

É quando uma aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro, query string, etc.) sem validar se o destino é confiável. Um atacante controla para onde a vítima é levada, usando a reputação da aplicação legítima para enganá-la e roubar credenciais ou distribuir malware.

Exemplo

Um site de login tem `redirect.php?url=https://exemplo.com/dashboard`. O atacante muda para `redirect.php?url=https://site-falso.com` e envia o link falso por phishing. A vítima clica confiando no domínio legítimo e acaba em um site fake que coleta suas credenciais.

Como mitigar

Valide e whitelist as URLs permitidas antes de redirecionar — nunca confie no input do usuário. Alternativamente, use IDs ou tokens que mapeiem para destinos pré-aprovados, ou verifique se a URL pertence ao mesmo domínio (validação com regex ou parsing seguro da URL).

CVE-2022-3280LOWAn open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an EPSS 0.6%CVE-2026-52802MEDIUMGogs: Open Redirect via redirect_to in GogsEPSS 0.6%CVE-2022-30992—Open redirect via user-controlled query parameterEPSS 0.6%CVE-2024-50345LOWOpen redirect via browser-sanitized URLs in symfony/http-foundationEPSS 0.6%CVE-2015-10104LOWIcons for Features Plugin class-icons-for-features-admin.php redirectEPSS 0.6%CVE-2024-5492MEDIUMOpen redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websitesEPSS 0.6%CVE-2022-3438MEDIUMOpen Redirect in ikus060/rdiffwebEPSS 0.5%CVE-2024-2465HIGHOpen redirection in CDeXEPSS 0.5%CVE-2022-38197MEDIUMBUG-000148347 Unvalidated redirect issues in ArcGIS Server.EPSS 0.5%CVE-2024-24808MEDIUMpyLoad open redirect vulnerability due to improper validation of the is_safe_url functionEPSS 0.5%CVE-2022-46683MEDIUMJenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing EPSS 0.5%CVE-2022-31735—OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an EPSS 0.5%CVE-2026-54588CRITICALPoweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.EPSS 0.5%CVE-2024-4773HIGHWhen a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been useEPSS 0.5%CVE-2024-21723MEDIUM[20240202] - Core - Open redirect in installation applicationEPSS 0.5%CVE-2022-46288MEDIUMOpen redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to EPSS 0.5%CVE-2024-39694MEDIUMDuende IdentityServer Open Redirect vulnerabilityEPSS 0.5%CVE-2025-43526CRITICALThis issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enaEPSS 0.5%CVE-2022-27547MEDIUMHCL iNotes is susceptible to a link to non-existent domain vulnerability.EPSS 0.5%CVE-2023-24034LOWAn issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by usinEPSS 0.5%