Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-601 (指向未可信站点的URL重定向(开放重定向)) — Vulnerability Class 712

712 vulnerabilities classified as CWE-601 (指向未可信站点的URL重定向(开放重定向)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-33584 WordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerability — Video Conferencing with Zoom 4.7 Medium2024-04-29
CVE-2022-36029 BigBlueButton Greenlight Open Redirect vulnerability — greenlight 9.1 Critical2024-04-25
CVE-2022-36028 BigBlueButton Greenlight Open Redirect vulnerability — greenlight 9.1 Critical2024-04-25
CVE-2024-32078 WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability — FV Flowplayer Video Player 4.1 Medium2024-04-24
CVE-2024-28076 SolarWinds Platform Arbitrary Open Redirection Vulnerability — SolarWinds Platform 7.0 High2024-04-18
CVE-2024-2419 Keycloak: path traversal in the redirect validation 7.1 High2024-04-17
CVE-2024-1183 SSRF Vulnerability in gradio-app/gradio — gradio-app/gradio 5.3 -2024-04-16
CVE-2024-32129 WordPress Freshdesk (official) plugin <= 2.3.6 - Open Redirection vulnerability — Freshdesk (official) 4.7 Medium2024-04-15
CVE-2024-31253 WordPress WP OAuth Server (OAuth Authentication) plugin <= 4.3.3 - Open Redirection vulnerability — OAuth Server 4.7 Medium2024-04-10
CVE-2024-31282 WordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability — App Builder 4.7 Medium2024-04-10
CVE-2024-31213 InstantCMS Open Redirect vulnerability — icms2 3.5 Low2024-04-05
CVE-2024-31135 JetBrains TeamCity 安全漏洞 — TeamCity 6.1 Medium2024-03-28
CVE-2023-34020 WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability — Uncanny Toolkit for LearnDash 4.7 Medium2024-03-27
CVE-2024-29041 Express.js Open Redirect in malformed URLs — express 6.1 Medium2024-03-25
CVE-2024-2465 Open redirection in CDeX — CDeX 6.1AIMediumAI2024-03-21
CVE-2024-28239 URL Redirection to Untrusted Site in OAuth2/OpenID in directus — directus 5.4 Medium2024-03-12
CVE-2024-28113 Open redirection using the return_url parameter in Peering Manager — peering-manager 3.5 Low2024-03-12
CVE-2024-1227 Multiple vulnerabilities in Rejetto's Http File Server — Http File Server 6.5 Medium2024-03-12
CVE-2024-27291 Docassemble open redirect — docassemble 6.1 Medium2024-02-29
CVE-2024-24763 JumpServer Open Redirect Vulnerability — jumpserver 4.3 Medium2024-02-20
CVE-2024-21723 [20240202] - Core - Open redirect in installation application — Joomla! CMS 6.1 -2024-02-20
CVE-2024-25609 Liferay Portal和Liferay DXP 安全漏洞 — Portal 6.1 Medium2024-02-20
CVE-2024-25608 Liferay Portal和Liferay DXP 安全漏洞 — Portal 6.1 Medium2024-02-20
CVE-2023-44308 Liferay DXP 安全漏洞 — DXP 6.1 Medium2024-02-20
CVE-2023-5190 Liferay Portal和Liferay DXP 安全漏洞 — Portal 6.1 Medium2024-02-20
CVE-2024-21497 Caddy 安全漏洞 — github.com/greenpau/caddy-security 5.4 Medium2024-02-17
CVE-2024-21728 Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8 — osTicky component for Joomla 6.1 -2024-02-15
CVE-2024-24808 pyLoad open redirect vulnerability due to improper validation of the is_safe_url function — pyload 4.7 Medium2024-02-06
CVE-2024-21794 Open Redirect in Rapid SCADA — Rapid SCADA 5.4 Medium2024-02-01
CVE-2023-6291 Keycloak: redirect_uri validation bypass — Red Hat build of Keycloak 22 7.1 High2024-01-26

Vulnerabilities classified as CWE-601 (指向未可信站点的URL重定向(开放重定向)) represent 712 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.