Falhas do tipo CWE-601

1.190 resultados

Redirecionamento aberto (Open Redirect)

É quando uma aplicação redireciona o usuário para uma URL fornecida por ele (parâmetro, query string, etc.) sem validar se o destino é confiável. Um atacante controla para onde a vítima é levada, usando a reputação da aplicação legítima para enganá-la e roubar credenciais ou distribuir malware.

Exemplo

Um site de login tem `redirect.php?url=https://exemplo.com/dashboard`. O atacante muda para `redirect.php?url=https://site-falso.com` e envia o link falso por phishing. A vítima clica confiando no domínio legítimo e acaba em um site fake que coleta suas credenciais.

Como mitigar

Valide e whitelist as URLs permitidas antes de redirecionar — nunca confie no input do usuário. Alternativamente, use IDs ou tokens que mapeiem para destinos pré-aprovados, ou verifique se a URL pertence ao mesmo domínio (validação com regex ou parsing seguro da URL).

CVE-2026-63094HIGHSigNoz < 0.134.0 SSO OAuth State Manipulation Session Token TheftEPSS 0.3%CVE-2025-67502MEDIUMTaguette does not safeguard against Open RedirectEPSS 0.3%CVE-2026-47883MEDIUMSpring Framework Open Redirect in UrlHandlerFilterEPSS 0.3%CVE-2026-28413MEDIUMProducts.isurlinportal: Possible open redirect when using more than 2 forward slashesEPSS 0.3%CVE-2025-15112MEDIUMKsenia Security lares Home Automation 1.6 URL Redirection VulnerabilityEPSS 0.3%CVE-2026-45566MEDIUMRoxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypassEPSS 0.3%CVE-2026-45307MEDIUMSpeakr: Open redirect in is_safe_url via parser mismatch on next parameterEPSS 0.3%CVE-2026-83320HIGHVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Administration). Supported versions that are affected are EPSS 0.3%CVE-2026-40181MEDIUMReact Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationEPSS 0.3%CVE-2024-42930MEDIUMPbootCMS 3.2.8 is vulnerable to URL Redirect.EPSS 0.3%CVE-2025-61782MEDIUMOpen Redirect in OpenCTI's SAML Authentication FlowEPSS 0.3%CVE-2026-27736MEDIUMBigBlueButton has Open Redirect vulnerability in ApiControllerEPSS 0.3%CVE-2025-24740MEDIUMWordPress Learnpress plugin <= 4.2.7.1 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-86351MEDIUMMISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URLEPSS 0.3%CVE-2020-36845MEDIUMThe KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination UREPSS 0.3%CVE-2024-50463MEDIUMWordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-41479MEDIUMAuthlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_typeEPSS 0.3%CVE-2024-43280MEDIUMWordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-34257MEDIUMOpen Redirect vulnerability in SAP NetWeaver Application Server ABAPEPSS 0.3%CVE-2024-49682MEDIUMWordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerabilityEPSS 0.3%