Falhas do tipo CWE-601

1.187 resultados

Redirecionamento aberto (Open Redirect)

É quando uma aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro, query string, etc.) sem validar se o destino é confiável. Um atacante controla para onde a vítima é levada, usando a reputação da aplicação legítima para enganá-la e roubar credenciais ou distribuir malware.

Exemplo

Um site de login tem `redirect.php?url=https://exemplo.com/dashboard`. O atacante muda para `redirect.php?url=https://site-falso.com` e envia o link falso por phishing. A vítima clica confiando no domínio legítimo e acaba em um site fake que coleta suas credenciais.

Como mitigar

Valide e whitelist as URLs permitidas antes de redirecionar — nunca confie no input do usuário. Alternativamente, use IDs ou tokens que mapeiem para destinos pré-aprovados, ou verifique se a URL pertence ao mesmo domínio (validação com regex ou parsing seguro da URL).

CVE-2025-4838MEDIUMkanwangzjm Funiture Login LoginServlet.java doPost redirectEPSS 0.4%CVE-2024-33584MEDIUMWordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerabilityEPSS 0.4%CVE-2023-45202MEDIUMOnline Examination System v1.0 - Multiple Open RedirectsEPSS 0.4%CVE-2023-41699MEDIUMPayara Platform: URL Redirection to untrusted site using FORM authenticationEPSS 0.4%CVE-2023-34247MEDIUM@keystone-6/auth Open Redirect vulnerabilityEPSS 0.4%CVE-2023-45203MEDIUMOnline Examination System v1.0 - Multiple Open RedirectsEPSS 0.4%CVE-2025-0970MEDIUMZenvia Movidesk Login redirectEPSS 0.4%CVE-2023-5445MEDIUM An open redirect vulnerability in ePolicy Orchestrator prior to 5.10.0 CP1 Update 2, allows a remote low privileged user to modify the URL EPSS 0.4%CVE-2026-47377MEDIUMNocoDB: Open Redirect via Hash Fragment in hashRedirect PluginEPSS 0.4%CVE-2024-28113LOWOpen redirection using the return_url parameter in Peering ManagerEPSS 0.4%CVE-2022-34474MEDIUMEven when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an externalEPSS 0.4%CVE-2023-47168MEDIUMOpen redirect in /oauth/<service>/mobile_login?redirect_to=EPSS 0.4%CVE-2023-0042MEDIUMAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 priorEPSS 0.4%CVE-2024-46886MEDIUMThe web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to makEPSS 0.4%CVE-2026-34847MEDIUMhoppscotch: Open redirect via `/enter?redirect=`EPSS 0.4%CVE-2026-24052HIGHClaude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled DomainsEPSS 0.4%CVE-2024-31213LOWInstantCMS Open Redirect vulnerabilityEPSS 0.4%CVE-2026-54618CRITICALObsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the userEPSS 0.4%CVE-2024-52003MEDIUMX-Forwarded-Prefix Header still allows for Open Redirect in traefikEPSS 0.4%CVE-2022-2237MEDIUMA flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSsEPSS 0.4%