Open Redirect
Monthly
Unauthenticated remote attackers can steal OAuth2 authorization codes from smart-sso deployments running version 2.1.1 or earlier by abusing an unvalidated redirectUri parameter in the /login handler (CWE-601). A victim who already holds an active SSO session must be induced into opening a crafted /login link, after which the attacker - who must additionally hold any valid OAuth2 client credentials - redeems the leaked code at /oauth2/access_token to obtain the victim's access token, giving both high confidentiality and integrity impact (CVSS 7.6 v4.0: AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N; independent assessment CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). Exploitation is conditional rather than trivial: it fails if the victim has no active session, does not click the link, or if the attacker lacks valid client credentials, though no authentication to the SSO server itself is required (PR:N). No public exploit identified at time of analysis, although a public technical writeup describing the authorization-code leak path has been published; this is a genuine but conditional risk rather than a drop-everything emergency.
Improper validation of the reset_url parameter in the Checkmk Setup in-page search lets an unprivileged remote attacker craft a URL that, once opened by an authenticated user holding Setup access, executes arbitrary script in that user's session or redirects the user to an arbitrary external site - but only when the victim clicks the Reset button or submits an empty search, since the payload does not fire on page load. Affected are Checkmk releases before 2.5.0p15, before 2.4.0p38, before 2.3.0p51, and the end-of-life 2.2.0 branch; fully patched instances are not exploitable. No public exploit code has been identified at time of analysis, and exploitation depends on successful social engineering of a privileged Setup user combined with mandatory user interaction.
Open redirect flaw in the OAuth1 callback validation of Apache Allura through 1.21.0 allows unauthenticated remote attackers to redirect users to arbitrary attacker-controlled URLs during the OAuth authorization flow (CWE-601), potentially exposing authorization codes or tokens if a victim completes the flow. Exploitation is not drive-by: per the independent assessment a user must be induced to traverse the attacker-influenced OAuth request (UI:R), which lowers real-world risk below the supplied 9.1 base score; the vendor patched the issue in Allura 1.22.0, no public exploit identified at time of analysis, and EPSS is 0.15% (4th percentile), so this is assessed as a moderate real-world priority.
Insufficient validation in the Single Sign-On (SSO) login flow of Arista CloudVision lets a remote, unauthenticated attacker craft a login URL that, once clicked by a user, causes the identity provider to send IdP-issued authentication material to an attacker-controlled URL rather than to CloudVision (CWE-601 open redirect), resulting in credential/assertion theft and potential account impersonation. The vulnerability is rated High (vendor CVSS 4.0 7.6; assessed CVSS 3.1 7.6, AV:N/AC:H/PR:N/UI:R with High confidentiality and integrity impact) and only affects deployments where CloudVision SSO is configured and in use. No public exploit code or confirmed active exploitation was identified at time of analysis, and exploitation depends on victim interaction plus specific SSO/IdP configuration and the attacker's ability to produce a redirect accepted by the deployment.
Host header injection in Nezha 2.2.3's OAuth2 redirect endpoint (/api/v1/oauth2/{provider}) allows an unauthenticated remote attacker who can control the HTTP Host header on a request reaching the server to make Nezha emit an attacker-chosen redirect_uri to the configured identity provider; a victim induced to start the OAuth2 login/binding flow can then have their authorization code delivered to the attacker's origin, letting the attacker complete the flow and take over the account. The bug is a regression of the GHSA-9rc6-8cjv-rcvx fix and only manifests when the new optional dashboard_host setting is left empty, so the code no longer falls back to install_host; exploitation also requires victim interaction and an identity provider that accepts the forged redirect URI, which is why the independent assessment scores it CVSS:3.1/AV:N/AC:H/PR:N/UI:R while the vendor-style CVSS 4.0 rating is 9.3. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; no patched release version was published with the advisory, only an upstream fix commit (38824dbc11a63964c5b9296ae4c68e62b34fa04b).
Stored cross-site scripting and open redirect in Warpgate's SSO endpoints (versions prior to 0.25.5) allow an unauthenticated remote attacker to inject markup and JavaScript into the authenticated Warpgate origin. The attacker stores an arbitrary 'next' parameter via /@warpgate/api/sso/providers/:name/start, which the return handler later reflects without HTML escaping; the victim must follow the crafted link and complete an SSO login before the payload executes. Successful exploitation grants access to session data and user-level APIs, escalating to administrator APIs when the victim is a Warpgate administrator, and the same unvalidated value enables an open redirect via the GET /@warpgate/api/sso/return path. The vendor rates this 9.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), reflecting network reachability with no attacker privileges but mandatory victim interaction; no public exploit code or confirmed active exploitation was identified at time of analysis.
Credential disclosure in Apple Containerization versions before 0.41.0 allows an unauthenticated remote attacker who controls or impersonates a container registry to redirect the client's token request to an attacker-chosen host via an open redirect, leaking the victim's registry credentials. The victim must initiate a pull or authentication flow against the adversarial registry, and upgrading to 0.41.0 remediates the flaw. CISA SSVC records no known exploitation, and no public exploit code was identified at time of analysis.
Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 expose an Administration component flaw that lets a low-privileged, network-connected user leverage another person's interaction to read or modify report data — including data belonging to products outside BI Publisher itself, per the CVSS scope-change metric. Oracle rates the issue 7.6 with high confidentiality impact and low integrity impact, and no availability impact. No EPSS score, CISA KEV listing or public proof-of-concept was included in the provided intelligence, so no public exploit is identified at time of analysis; remediation is via Oracle's September 2026 Critical Security Patch Update advisory.
OAuth Dynamic Client Registration redirect URI validation bypass in Mattermost 11.7.x (through 11.7.7), 11.8.x (through 11.8.4) and 11.9.0 lets a remote unauthenticated attacker register an OAuth client whose attacker-controlled callback host evades the configured redirect URI allowlist, so authorization responses can be sent to a host the attacker controls. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N, score 9.3) confirms no authentication is needed to register the client, but a legitimate user must still be induced to complete the OAuth authorization flow for the malicious client, which makes the attack non-automatable per SSVC (Exploitation: none, Automatable: no) despite a total technical impact rating. No public exploit code was identified at time of analysis, the issue is not in CISA KEV, and EPSS is low at 0.28% (roughly 20th percentile); the practical risk is a serious but not urgent credential/interception exposure confined to deployments that expose OAuth with Dynamic Client Registration.
Credential exfiltration in Renovate (renovatebot/renovate) before 44.11.2 lets a malicious or compromised container registry steal the registry credentials Renovate holds. When enumerating container image tags/digests, Renovate follows an HTTP Link header pagination URL and re-attaches the original registry's credentials without checking that the follow-up URL shares the same origin (CWE-601 open redirect), so a hostile registry can redirect the authenticated request to an attacker-controlled host and capture the secrets. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not in CISA KEV.
Credential exfiltration in Renovate before 44.11.2 (and Mend Renovate CE/EE images/charts before 15.4.0, enterprise-edition helm chart before 10.4.0) lets a malicious or compromised NuGet registry harvest the configured registry credentials by returning an HTTP Link header whose 'next' pagination URL points to an attacker-controlled host. Renovate followed cross-origin pagination targets without an origin check and re-attached the registry credentials, delivering them to an arbitrary attacker-chosen server. Classified as an open redirect (CWE-601); no public exploit is identified at time of analysis and it is not in CISA KEV.
Credential disclosure in Renovate before 44.11.3 allows a malicious or compromised GitHub server to exfiltrate host credentials by returning a crafted HTTP Link header. When Renovate paginates GitHub API responses (as a repository host or via the github-releases, github-tags, or git-refs datasources), it blindly follows the 'next' pagination URL without verifying it still points to the originally-contacted host, sending the configured credentials to whatever host the attacker specifies. No public exploit has been identified and the issue is not in CISA KEV, but the CVSS 4.0 base score is 9.2 due to high confidentiality impact with a scope change.
Credential exfiltration in Renovate before 44.11.3 lets a malicious or compromised GitLab server steal the authentication tokens Renovate uses to talk to it. When Renovate follows GitLab API pagination, it trusts the server-supplied Link header without validating its destination, so an attacker-controlled server can redirect the credential-bearing follow-up request to attacker infrastructure (CWE-601 open redirect). Reported by VulnCheck with a CVSS 4.0 base score of 9.2; no public exploit identified at time of analysis and no CISA KEV listing.
Open redirect in Armiya Information Technologies Access Control System (all versions before Versiyon 2) lets remote attackers craft URLs that silently redirect authenticated victims to attacker-controlled sites, enabling source-of-data spoofing and phishing. Reported by Turkey's national CSIRT (TR-CERT); no public exploit identified at time of analysis and no EPSS/KEV data is available. The vendor-assigned CVSS of 9.3 appears substantially overstated for a classic CWE-601 open redirect.
Intent redirection in Android's SetupPassthroughActivity allows a locally present, low-privilege attacker to launch arbitrary activities and escalate privileges to a higher-trust system level. Affecting Android 14 through 17 (including 16-qpr2), the flaw resides in the onCreate method of SetupPassthroughActivity.java and requires user interaction to trigger. No public exploit is identified at time of analysis, and an EPSS of 0.11% (2nd percentile) indicates minimal current exploitation probability, consistent with the SSVC exploitation-none signal.
OAuth authorization code hijacking in Stalwart Mail Server through v0.16.19 enables full email account takeover when a victim authenticates via a crafted phishing link. The validation routine for OAuth redirect URIs in the default shipped configuration - where client authentication is disabled - returns success immediately without comparing the supplied redirect_uri against any registered client destination, allowing any attacker-controlled URI to receive a valid authorization code. The CVSS 4.0 score of 8.5 with high confidentiality and integrity impact reflects the severity of resulting mailbox compromise; no public exploit code has been identified at time of analysis, though the vulnerability is fully described in a public GitHub issue with source-level detail.
JWT token disclosure in OpenMetadata's SAML and OIDC/OAuth2 authentication flows enables account takeover by exploiting an unvalidated open redirect that appends the victim's freshly issued JWT, email, and account name to an attacker-controlled URL. All 1.x releases are affected because neither SamlLoginServlet nor the OIDC/OAuth2 handler validates the caller-supplied redirect destination against any allowlist or registered callback set. An attacker who socially engineers a victim into clicking a crafted login URL can capture the full JWT upon successful authentication and immediately assume control of that account via the OpenMetadata API. No public exploit has been identified at time of analysis, and no CISA KEV listing is confirmed.
Unauthenticated OAuth redirect URI hijacking in Coroot versions 1.20.2 through 1.24.5 allows attackers to register malicious MCP OAuth clients without any credentials, then capture authorization codes from signed-in users who follow crafted authorization URLs and approve a consent dialog. The captured codes can be exchanged for valid access tokens, enabling full MCP session hijacking. No public exploit has been identified at time of analysis and no CISA KEV listing is present, but the registration step requires no authentication, materially lowering attacker prerequisites.
OAuth redirect URI validation in Ech0 through 4.5.6 allows session hijacking via exchange-code theft by exploiting incomplete allowlist enforcement. The `parseAndValidateClientRedirect` function at `internal/service/auth/auth.go:448` compares only scheme and host of the client-supplied `redirect_uri` against the admin allowlist, ignoring path, query, and fragment in violation of RFC 6749 §3.1.2. An attacker who induces a victim to follow a crafted OAuth login link can redirect the post-authentication browser to any path on an allowlisted host, exposing the one-time exchange code via Referer headers or analytics, then redeem it at `POST /api/auth/exchange` for the victim's access and refresh tokens. No public exploit or CISA KEV listing is confirmed at time of analysis; a detailed public advisory (GHSA-p64j-f4x9-wq66) with source code evidence lowers the bar for independent exploitation. Fixed in 4.7.3.
Server-side request forgery in the Unstructured-IO `unstructured` library (0.4.7 through versions before 0.24.0) lets an attacker who controls the `url=` argument of partition(), partition_html(), or partition_md() coerce a server-side ingestion service into fetching loopback, internal, or cloud-metadata endpoints, with the response returned as Element text. Because ingestion pipelines commonly accept user-supplied URLs, unauthenticated remote abuse is realistic (CVSS 9.3). No public exploit identified at time of analysis; the flaw is fixed in 0.24.0 via a centralized fetch helper.
Full takeover of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 is possible when a remote unauthenticated attacker over HTTP lures an authorized user into interacting with malicious content, exploiting a flaw in the Installation and Configuration component. Because the vulnerability carries a scope change, successful exploitation can extend beyond Hyperion to significantly impact other integrated products, yielding complete confidentiality, integrity, and availability compromise. Oracle rates it CVSS 9.6; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Reflected JavaScript injection and open redirect in MyBB forum software before 1.8.40 lets a remote attacker execute script in a victim's browser session. The Contact module (contact.php) takes a redirect target from the 'from' request parameter or the Referer header and passes it to redirect() without validating the URL scheme, so a javascript: URI can be delivered as the destination of the post-submission 'Click here if you don't want to wait any longer' link. CVSS is 9.3; no public exploit identified at time of analysis, and the flaw requires the victim to click the crafted link.
Open redirect in the Grav API plugin (grav-plugin-api) before 1.0.14, bundled with Grav 2.0's admin-next/API stack, allows post-login phishing via a backslash normalization bypass in SsoController::sanitizeReturnTo(). An attacker who can send a crafted OAuth login URL to an authenticated admin victim can supply a returnTo value such as '/\evil.com' that passes the guard rejecting '//' prefixes but is silently normalized by the browser into the protocol-relative URL '//evil.com', redirecting the victim to an attacker-controlled site immediately after a legitimate login. No public exploit has been identified at time of analysis, though the backslash-normalization technique is a well-documented browser behavior; the vendor advisory references a fix in version 1.0.14.
Recursive arbitrary directory deletion in OpenEMR before 8.2.0 is achievable by an unauthenticated attacker through a two-vulnerability chain: a path traversal flaw in standard_tables_manage.php allows the db GET parameter - passed unsanitized to temp_dir_cleanup() - to resolve outside the intended PHP temporary directory, while an open redirect in dicom_frame.php enables delivery of a crafted URL that triggers this deletion inside an authenticated Superuser's active session. The patch is confirmed in OpenEMR 8.2.0 (released 2026-07-08); no active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis. The potential for irreversible mass deletion of patient records and EHR runtime data makes this a high-priority patching target despite the social-engineering prerequisite.
Token content validation bypass in SAP Approuter (node.js package < 23.0.0) enables an unauthenticated remote attacker to exfiltrate sensitive credential material to an attacker-controlled destination by submitting a specially crafted token. The flaw, classified as CWE-601 (Open Redirect), exploits insufficient URL or destination validation within the Approuter's token-processing logic under specific non-default configurations, yielding high confidentiality impact and low integrity and availability impact. No public exploit or active exploitation is confirmed at time of analysis; vendor patch is available via SAP Approuter 23.0.0 per SAP Security Note 3786038.
Open redirect in Grav's form plugin (getgrav/grav-plugin-form) versions 9.1.11 through 9.1.12 allows unauthenticated form submitters to cause the server to issue a 302 redirect to an arbitrary external URL, enabling phishing attacks against site visitors. The vulnerability exists because the redirect process action, introduced in v9.1.11, evaluates user-supplied form field values through Twig expressions without sanitizing the resulting URL, and Grav::redirect() passes that output to the browser without origin validation. No public exploit code has been identified at time of analysis, and no active exploitation is confirmed in CISA KEV, though the low attack complexity and zero-authentication requirement make this straightforward to abuse against any site with a susceptible form blueprint.
Server-Side Request Forgery in Google mcp-toolbox versions 0.3.0 through 1.4.0 lets remote attackers coerce the toolbox into making unauthorized requests to internal or arbitrary endpoints by supplying a crafted path parameter that triggers an open redirect or destination swap on the backend. Because the HTTP client in internal/sources/http/http.go was initialized without a CheckRedirect policy or target-IP validation, baseline parameter sanitization is bypassed once the server follows the redirect. There is no public exploit identified at time of analysis (CVSS 4.0 carries E:U, Exploit Unproven), and the flaw is notably reachable via malicious data-driven LLM prompts, not just direct attacker input.
Open redirect in IBM Planning Analytics Local versions 2.1.0 through 2.1.21 lets remote attackers craft URLs that bounce authenticated users to attacker-controlled external sites. When the product is deployed with SSO authentication, the redirect can leak session tokens carried in the flow, enabling session hijacking. No public exploit identified at time of analysis; this is not on CISA KEV and no POC is referenced in the provided data.
Open redirect in MISP installation scripts allows unauthenticated remote attackers to craft malicious URLs that leverage a missing trailing slash in the Apache HTTP-to-HTTPS redirect directive. When a user follows a crafted link on the legitimate MISP domain, the redirect appends attacker-controlled path content directly to the hostname, causing the browser to interpret the attacker’s domain as the destination host. This can lead to phishing and credential collection, though no active exploitation has been identified and a vendor patch is available.
Server-side request forgery in PHPOffice PhpSpreadsheet (>= 4.0.0 through 5.8.0, plus older branches back to 2.0.0) lets an attacker bypass the WEBSERVICE() domain whitelist introduced in 5.4.0 by chaining through an HTTP 302/301 redirect. Because the whitelist only validates the initial URL host while file_get_contents() silently follows redirects without re-validation, an attacker who can upload a crafted XLSX to an app that calls setDomainWhiteList() and getCalculatedValue() can pivot to internal-only targets and read the full HTTP response (up to 32,767 bytes) as a cell value. Publicly available exploit code exists (a full PoC and lab reproduction are in the GitHub advisory); no public exploit identified as actively used in the wild and it is not in CISA KEV.
Server-Side Request Forgery (SSRF) and open redirect in Next.js rewrite/redirect rules when the destination hostname is dynamically constructed from user-controlled input. Versions 12.0.0 to 15.5.20 and 16.0.0 to 16.2.10 are affected, allowing a remote attacker to proxy requests to arbitrary hosts or redirect users. Patched versions 15.5.21 and 16.2.11 are available; no active exploitation has been reported.
DOM-based cross-site scripting in Unblu Spark, reachable via an open-redirect flaw (CWE-601), lets remote attackers execute arbitrary JavaScript in a victim's browser after luring them to a crafted link. When Spark runs with com.unblu.identifier.siteEmbeddedSetup=true it shares the host application's origin, so injected script inherits full access to the host app's cookies, DOM, and same-origin APIs, expanding the blast radius well beyond Unblu itself and driving the CRITICAL 9.3 (CVSS 4.0) rating for on-prem embedded deployments. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Account/application takeover in Oracle WebCenter Content: Imaging (Core component of Fusion Middleware) affects supported versions 12.2.1.4.0 and 14.1.2.0.0, where a remote unauthenticated attacker who lures a legitimate user into interacting with malicious content over HTTP can fully compromise the Imaging application. Oracle rates it CVSS 3.1 7.5 with high confidentiality, integrity, and availability impact, but flags it as difficult to exploit (AC:H) and dependent on user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; a fix ships in the Oracle July 2026 Critical Patch Update.
Unauthorized access to critical data in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 is possible via the bundled OpenSearch Dashboards component, where a remote unauthenticated attacker can compromise confidentiality by luring a victim into interacting with attacker-supplied content (UI:R). The scope-change and confidentiality-only vector (S:C/C:H/I:N/A:N), combined with the vendor's 'Authentication Bypass' tag, is characteristic of a client-side flaw such as cross-site scripting in the Dashboards UI that lets an attacker read data across products the victim can reach. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; it is addressed in Oracle's July 2026 Critical Patch Update.
Cross-site-scripting-style compromise of Oracle PeopleSoft Enterprise PeopleTools 8.62 (PIA Core Technology) lets a remote, unauthenticated attacker who lures an authenticated user into interacting with a crafted HTTP request achieve limited read/write access to PeopleSoft data and cause partial denial of service. The scope-change flag (S:C) means the impact can extend beyond PeopleTools into additional integrated products. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; CVSS 3.1 base score is 7.1.
Full takeover of Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) is possible when an unauthenticated remote attacker abuses a flaw in the Metadata Plugin component over HTTPS and induces an authorized user to interact with attacker-controlled content. Because the compromise yields high confidentiality, integrity, and availability impact against a central management console for Oracle estates, one successful attack can hand an adversary control of the platform. There is no public exploit identified at time of analysis and no CISA KEV listing, but the low attack complexity and unauthenticated network vector make it a priority patch in this quarter's Oracle Critical Patch Update.
Open redirect and token-theft in dataCycle-CORE (all versions up to and including 25.07.3) lets a low-privileged authenticated API user inject attacker-controlled `forwardToUrl` and `redirectUrl` parameters into password-reset and confirmation email flows, which lack host allowlisting. Because a live reset/confirmation token can be appended to an attacker-controlled destination, and users are redirected off-site after completing a reset, an attacker can capture tokens, hijack confirmations, and stage convincing phishing from a trusted-domain email. No public exploit or CISA KEV listing exists at time of analysis; the issue is fixed in 26.06.08.
Session token theft in SigNoz through 0.133.0 lets unauthenticated attackers hijack any user account on instances configured with Google OAuth, SAML, or OIDC single sign-on. Because the unauthenticated sessions-context endpoint accepts an attacker-controlled 'ref' parameter that is embedded unvalidated into the SSO state/redirect, an attacker crafts a login URL that returns the victim's access and refresh tokens to an attacker-controlled host once the victim completes SSO. Reported by VulnCheck (CWE-601, open redirect), publicly available exploit code exists, though it is not listed in CISA KEV and EPSS was not provided.
Reflected cross-site scripting in MantisBT 2.28.3 and earlier lets remote attackers inject HTML into the unauthenticated /admin/install.php installer page through six user-supplied parameters echoed via an unescaped printf format string. Because the application ships a script-src 'self' Content Security Policy that lacks a form-action directive, an attacker cannot run inline JavaScript but can render fake credential-harvesting login forms, perform <meta>-based open redirects, and overlay attacker HTML via CSS injection on the legitimate admin page. There is no public exploit identified at time of analysis, no CISA KEV listing, and no CVSS/EPSS score in the provided data; the issue was reported by watchTowr and fixed in 2.28.4.
Reflected cross-site scripting in MantisBT's /admin/install.php (versions 2.28.3 and earlier) lets remote attackers inject HTML through six unescaped, user-supplied parameters echoed by print_test_result(). Although the page's Content-Security-Policy (script-src 'self') blocks inline JavaScript, the missing form-action directive permits credential-phishing form injection, <meta>-based open redirects, and CSS overlay attacks against the trusted admin origin. The advisory states no authentication is required; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Password reset token poisoning in the Grav API plugin (grav-plugin-api) before 1.0.4 lets an unauthenticated attacker hijack the account recovery flow by supplying an attacker-controlled host in the admin_base_url field (or Referer/Origin headers) of the POST /api/v1/auth/forgot-password request. Because the reset email's link is built from this unvalidated host, a victim who clicks it leaks a valid, unexpired reset token to the attacker, yielding full account takeover. No public exploit is identified at time of analysis, and it is not in CISA KEV, but VulnCheck's advisory and vendor GHSA-5xc4-j99p-cp4m confirm the flaw and a 1.0.4 fix.
Unauthorized access in SAP Approuter arises because the component fails to validate incoming request headers during the OAuth2 login flow under certain configurations (CWE-601, open redirect). An unauthenticated remote attacker who lures a victim into clicking a crafted link can hijack the authentication flow to gain high-confidentiality and high-integrity access to the application. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the network-reachable, low-complexity nature (CVSS 8.1) makes it a meaningful patch priority for SAP BTP/Cloud Foundry environments.
Token theft via open redirect in the Authorizer identity server (authorizerdev/authorizer) lets an unauthenticated attacker steal a logged-in victim's OAuth/OIDC tokens. The /authorize endpoint fails to validate the redirect_uri against AllowedOrigins, so with response_type=token or id_token the server appends access_token, id_token, and refresh_token to any attacker-supplied URL via a 302 redirect. Detailed reproduction steps are public in advisory GHSA-h29v-hj44-q8cv, and the required client_id is trivially harvested from the unauthenticated /graphql meta query; no active exploitation is confirmed in CISA KEV at time of analysis.
Privilege elevation in Microsoft 365 Copilot arises from an open redirect (CWE-601) that lets an unauthenticated remote attacker craft a Copilot-hosted URL that forwards a victim to an attacker-controlled site. Per the CVSS vector this requires the victim to interact (UI:R) with the malicious link and results in a scope change with high confidentiality and integrity impact, consistent with token/credential capture enabling elevated access. There is no public exploit identified at time of analysis (Exploit Maturity: Unproven), and it is not listed in CISA KEV; Microsoft rates it 9.3 and reports an official fix is available.
Account impersonation in Budibase 3.37.2 through 3.38.x allows attackers with a Slack, Discord, or MS Teams account in the same workspace to silently bind their external chat identity to any authenticated Budibase user who clicks a crafted link. Because the `/api/chat-links/:instance/:token/handoff` endpoint performs a permanent state-changing write with no consent UI and no CSRF token, a successful link grants the attacker full impersonation through the AI chat agent, reading data and triggering automations as the victim. No public exploit identified at time of analysis beyond the detailed proof-of-concept in the GHSA advisory authored by the reporter.
Privilege elevation in Microsoft 365 Copilot's Business Chat is possible when an attacker abuses an open redirect (CWE-601) to coerce a victim into following a crafted link that lands on an attacker-controlled site. With a CVSS 3.1 base score of 8.8 and high impact across confidentiality, integrity, and availability, successful exploitation lets an unauthorized remote attacker elevate privileges over the network after user interaction. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Account takeover in Oracle iSupplier Portal (E-Business Suite versions 12.2.3-12.2.15) allows a low-privileged remote attacker to fully compromise the application by tricking a separate user into interacting with attacker-supplied content over HTTPS. The Home Page component is the entry point, and successful exploitation yields full confidentiality, integrity, and availability impact on the portal. No public exploit identified at time of analysis, but Oracle's critical patch advisory confirms the issue is real and patchable.
Cross-context compromise of Oracle WebCenter Content 14.1.2.0.0 (Content Server component) allows a remote unauthenticated attacker over HTTPS to gain high-impact read access and limited write access to managed content, with effects that cross trust boundaries into additional Oracle Fusion Middleware products (scope change). Exploitation requires a victim to interact with attacker-controlled input (UI:R), and at the time of analysis there is no public exploit identified and the issue is not listed in CISA KEV.
Server takeover in Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0 (Console component) allows a remote unauthenticated attacker who can lure an authenticated user into interacting with a crafted HTTP request to fully compromise the server with a scope change to other products. CVSS 8.3 reflects high impact tempered by high attack complexity and required user interaction; no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Full takeover of Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 is achievable by remote unauthenticated attackers via the Console component over HTTPS, provided a victim performs an action such as clicking a malicious link. The flaw carries a CVSS 3.1 base score of 8.8 with high impact across confidentiality, integrity, and availability, but exploitation hinges on user interaction. No public exploit identified at time of analysis, and the issue is not currently listed in CISA KEV.
Cross-scope data compromise in Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 allows a low-privileged remote attacker over HTTPS to read, create, modify, or delete critical data through the administration Console, provided a separate user is induced to perform an action. The CVSS 3.1 base score of 8.7 reflects high confidentiality and integrity impact with scope change reaching beyond WebLogic itself, and no public exploit identified at time of analysis.
Credential leakage in Erlang/OTP's inets httpc client (versions 17.0 through 29.0.2, 28.5.0.2, and 27.3.4.13) allows attacker-controlled servers to harvest Authorization and Proxy-Authorization headers by issuing cross-origin 3xx redirects. Because httpc_response:redirect/2 only updates the host field and copies all other headers verbatim - and autoredirect defaults to true - any httpc caller using HTTP Basic auth or URL userinfo silently forwards credentials to the redirect target. No public exploit identified at time of analysis, but the fix has been published upstream and tagged in vendor-released OTP patch versions.
Open redirect bypass in Apache Airflow 3.0.0 through 3.2.1 allows remote unauthenticated attackers to craft URLs that evade the `is_safe_url` host check by using triple-slash (`///`), backslash, or URL-encoded backslash prefixes, redirecting victims to attacker-controlled domains. The flaw stems from a parsing inconsistency between WHATWG URL semantics and Python's urllib. No public exploit has been identified at time of analysis, and EPSS rates exploitation probability at only 0.01% (4th percentile).
Server-side request forgery in Typebot versions 3.15.2 and prior allows authenticated users to bypass the validateHttpReqUrl() SSRF filter by chaining an attacker-controlled HTTP 302 redirect, since the underlying ky and fetch clients follow redirects without re-validating the destination. This enables reaching AWS instance metadata at 169.254.169.254, private subnets, and container-internal services from the Typebot server, with realistic impact including theft of cloud IAM credentials. No public exploit identified at time of analysis, and the issue is fixed in version 3.16.0.
Open redirect in Red Hat build of Keycloak permits remote attackers to send victims to attacker-controlled hosts by abusing a parser discrepancy between Keycloak and Java's URI implementation during redirect URL validation. The flaw applies only to clients configured with a wildcard ('*') in the 'Valid Redirect URIs' field and requires the victim to click a crafted link, with no public exploit identified at time of analysis.
Server-Side Request Forgery in Budibase self-hosted instances allows authenticated Global Builder users to bypass SSRF protections via trivial substring manipulation in plugin URL uploads. The vulnerability exploits a flawed validation check that accepts any URL containing '.tar.gz' anywhere in the string, enabling requests to internal cloud metadata services (AWS IMDS at 169.254.169.254), CouchDB, Redis, and private network ranges when chained with the BLACKLIST_IPS bypass (CVE-2026-45060) or via HTTP redirect chains. CVSS 7.7 (High) with Changed Scope indicates cross-boundary impact from application to infrastructure layer. Vendor-released patch available in version 3.35.10 per GitHub security advisory GHSA-xh5j-727m-w6gg. EPSS data not available; no CISA KEV listing at time of analysis. Publicly available exploit code exists in researcher's GitHub repository with Docker-based proof-of-concept.
Open redirect vulnerability in Snipe-IT versions prior to 8.4.1 allows authenticated attackers to redirect users to malicious sites by poisoning the session-stored HTTP Referer header, enabling phishing, session hijacking, and malware distribution attacks. Exploitation requires prior session poisoning and user interaction (clicking a form submission), limiting real-world practical impact despite moderate CVSS score of 5.9. Vendor-released patch available in version 8.4.1.
Open redirect vulnerability in DivvyDrive 4.8.2.9 through 4.8.3.1 allows remote unauthenticated attackers to redirect users to malicious sites via parameter injection, achieving high-severity impact across confidentiality, integrity, and availability with scope change. The CVSS 9.6 (Critical) score reflects cross-site scope change and combined impacts, though typical open redirect attacks involve phishing rather than direct system compromise. TR-CERT published this vulnerability with vendor coordination through Turkish national CERT.
Cross-host HTTP redirects in Microsoft Kiota HTTP client libraries leak session cookies, proxy credentials, and custom authentication headers to attacker-controlled domains. When Kiota's RedirectHandler middleware follows 3xx redirects to different hosts (e.g., trusted.example.com → evil.attacker.com), it strips the Authorization header but forwards Cookie, Proxy-Authorization, and all custom headers unchanged. Publicly available exploit code exists with a complete proof-of-concept demonstrating cookie exfiltration to malicious redirect targets. This affects all Kiota language implementations (Java, .NET, Python, TypeScript, Go) and downstream consumers including Microsoft Graph SDK for Java. The vulnerability requires user interaction to trigger the initial API request, but once triggered, credential leakage is automatic on cross-origin redirects (CVSS:4.0 AV:N/AC:L/AT:P/PR:N/UI:P). Vendor-released patches are available across all affected package ecosystems.
Privilege elevation in Microsoft 365 Copilot via an open redirect (CWE-601) lets an unauthenticated remote attacker abuse the AI assistant's URL-handling to bounce a victim to an attacker-controlled site and elevate privileges over the network. Rated CVSS 9.3 with a scope-changed vector because the redirect crosses a trust boundary, though exploitation requires the victim to interact (click) with the crafted link. No public exploit identified at time of analysis and EPSS is very low (0.04%), indicating no observed real-world exploitation despite the high severity score.
Information disclosure via server-side request forgery in GitHub Enterprise Server (all versions prior to 3.21) lets an unauthenticated attacker read sensitive environment variables from the appliance. The notebook rendering service follows HTTP redirects without revalidating the destination host, so an attacker who chains the instance's open-redirect endpoint can reach internal services and, using regex filter queries against an internal API combined with response-timing measurement, exfiltrate secret values one character at a time. No public exploit is identified at time of analysis and EPSS is very low (0.05%), but SSVC rates the technical impact as total.
Password reset poisoning in LinkAce (self-hosted link archive by Kovah) before 2.5.4 allows a remote attacker to hijack accounts by injecting a malicious host into reset URLs. Because the app trusts the X-Forwarded-Host header when building password reset links, an attacker who triggers a reset for a victim can cause the emailed link to point to an attacker-controlled domain; if the victim clicks it, the valid reset token leaks to the attacker, enabling full account takeover. No public exploit identified at time of analysis, and EPSS is very low (0.03%), consistent with SSVC exploitation status of 'none'.
Cross-origin request body replay in OpenClaw's fetchWithSsrFGuard function before version 2026.3.31 enables attackers to exfiltrate sensitive request data and headers to unintended origins through redirect manipulation. The vulnerability requires user interaction and allows high confidentiality impact through unsafe request body transmission across origin boundaries. Affects unauthenticated contexts. No public exploit identified at time of analysis, with low observed exploitation activity (EPSS <1%).
Open redirect vulnerability in HPE Aruba Networking Private 5G Core On-Prem GUI enables credential harvesting attacks against authenticated users. Remote attackers can craft malicious URLs that redirect victims from the legitimate login flow to attacker-controlled phishing pages designed to capture credentials. With CVSS 8.8 (High) severity and network-reachable attack surface requiring no authentication, this represents significant phishing risk for organizations deploying private 5G infrastructure. No public exploit identified at time of analysis, though exploitation requires minimal technical complexity.
Open redirect in Hoppscotch API development platform prior to version 2026.3.0 enables token exfiltration leading to complete account takeover. Attackers can craft malicious URLs that redirect authenticated users to attacker-controlled domains, stealing authentication tokens in transit. The vulnerability requires no authentication and minimal attack complexity (CVSS:4.0 AV:N/AC:L/PR:N), though user interaction is required (UI:A). No public exploit code or active exploitation confirmed at time of analysis, though the attack pattern is well-understood for CWE-601 vulnerabilities.
Open redirect in Red Hat Build of Keycloak allows authenticated attackers with control over another path on the same web server to bypass wildcard-based redirect URI validation and steal OAuth access tokens. Attack requires low complexity and user interaction (CVSS 7.3). EPSS and KEV status not available; no public exploit identified at time of analysis. This CWE-601 flaw enables token theft through maliciously crafted redirect flows, posing significant risk to SSO deployments where Keycloak shares a web server with attacker-controllable content.
Pocket ID versions 2.0.0 through 2.3.x suffer from improper callback URL validation that allows attackers to bypass redirect URI restrictions using URL userinfo characters (@), enabling authorization code interception. An attacker can craft a malicious authorization link to redirect authentication codes to an attacker-controlled server if a user is tricked into clicking it. Public exploit code exists for this vulnerability, and no patch is currently available.
ZITADEL versions 4.0.0-rc.1 through 4.7.0 are vulnerable to open redirect attacks through improper validation of the Forwarded and X-Forwarded-Host headers used in password reset links. An attacker can craft a malicious request to redirect users to an attacker-controlled domain when they click password reset confirmation links, enabling credential harvesting or phishing attacks. The vulnerability affects all deployments using affected versions and has been patched in version 4.7.1.
Host header injection in Internet Routing Registry daemon (IRRd) 4.4.0-4.4.4 and 4.5.0 allows remote attackers to redirect password reset and account creation confirmation links to attacker-controlled domains, enabling account takeover of IRR database maintainer accounts. Successfully exploited accounts can modify routing policy objects (RPSL) in the IRR database. EPSS score of 0.06% (18th percentile) indicates low predicted exploitation probability. Vendor patches available in versions 4.4.5 and 4.5.1.
Traccar GPS tracking system through version 6.11.1 allows authenticated users to hijack OAuth 2.0 authorization codes through unvalidated redirect URIs in OIDC endpoints, enabling account takeover on integrated applications. The vulnerability stems from missing whitelist validation on the redirect_uri parameter, permitting attackers to exfiltrate authorization codes to attacker-controlled servers. Public exploit code exists for this HIGH severity flaw, and no patch is currently available.
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 76.4%.
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.5%.
Host header injection in Nezha 2.1.0 through 2.3.14 lets an attacker who can control or spoof the Host header on a victim's MCP request redirect file uploads and capture one-time download tokens that can be replayed to exfiltrate files. The flaw is in mintTransferTool, which builds the fs.download_url and fs.upload_url transfer links from the unvalidated Host header, so the observable impact is limited to low confidentiality and integrity loss rather than code execution. Exploitation is unauthenticated per the CVSS vector (PR:N) but conditional on the attacker influencing the reflected Host value - for example through a misconfigured or trusting reverse proxy, DNS rebinding, or a man-in-the-middle position on the victim's path - and on the victim actually invoking the MCP transfer tools. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has shipped a fix in Nezha 2.3.15.
Open redirect in Scoold, Erudika's Java-based Q&A and knowledge-sharing platform, affects every release prior to 1.69.1, where the backto and returnto parameters handled by HttpUtils.getBackToUrl() are validated with a case-insensitive prefix match against the configured server URL. An unauthenticated attacker can craft a sign-in link whose backto value is an absolute URL on a look-alike host such as example.com.evil.com; URI.resolve() retains the attacker URL, the prefix check passes, and the victim is redirected to the attacker's domain after completing authentication. The result is phishing and possible credential or token theft on the malicious site, but exploitation hinges on the victim following the crafted link and signing in (UI:R); no public exploit code and no confirmed active exploitation have been identified at time of analysis.
Open redirect in the Creema handmade marketplace mobile apps for Android and iOS lets a crafted URL cause the app to render an attacker-controlled web page inside its own in-app screen, enabling convincing phishing pages that appear to originate from a trusted app. The flaw requires the victim to actively open a malicious link (UI:A/UI:R) and no authentication is needed (PR:N), but impact is limited to integrity of displayed content (C:N/I:L/A:N), with no code execution or direct data compromise; CVSS base score is 5.1 (medium). There is no public exploit identified at time of analysis and no confirmed active exploitation (not in CISA KEV), though JPCERT/CC has published the issue as JVN48627289 and users of both platform apps are exposed regardless of app version because the vendor CPE entries are version-agnostic.
Gogs (self-hosted Git service) prior to 0.15.0+dev contains an open redirect in the /redirect endpoint and other post-action redirect flows that allows unauthenticated attackers to send victims to arbitrary external sites from a trusted Gogs domain. The flaw arises because internal/urlx/urlx.go IsSameSite evaluates a normalized copy of the redirect target while cmd/gogs/internal/web/web.go getRedirect and similar callers emit the original, unnormalized value in the Location header; a literal backslash ('\'), a percent-encoded backslash (%5C/%5c), or embedded tab/CR/LF causes browsers to resolve the emitted value as a scheme-relative external URL. Per the independent assessment the issue is medium severity (CVSS 4.0 base 5.3; CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), requires victim interaction (a click on a crafted link), and grants no access to the Gogs server itself; no public exploit code has been identified at time of analysis and the CVE is not in CISA KEV.
Open redirect in the nextjs-auth0 SDK before version 4.32.0 allows remote unauthenticated attackers to redirect users to an arbitrary external domain after authentication by crafting a malicious returnTo parameter that passes the SDK's same-origin check but is later reconstructed into a scheme-relative or absolute URL. Exploitation requires the victim to click an attacker-supplied authentication link and complete the login flow (CVSS vector includes UI:R), limiting impact to redirection with no direct code execution or data read on the host. No public exploit code or active exploitation (CISA KEV) has been identified, and a vendor patch is available in version 4.32.0.
Open redirect in Active Directory Federation Services (AD FS) allows an authenticated attacker to craft a federation/redirect URL that sends a victim to an attacker-controlled site while appearing to originate from a trusted AD FS endpoint. Only Windows systems with the AD FS role configured and reachable by users or the internet are affected - Windows Server 2016, 2019, 2022 and 2025 (including Server Core) plus Windows 10 1607 and 1809 builds below their listed fixed build numbers. Exploitation requires an authorized/high-privilege AD FS actor and a victim who interacts with the crafted URL, and the resulting impact is limited to spoofing (low confidentiality and integrity, no availability impact); there is no public exploit identified at time of analysis, KEV status is negative, and the moderate CVSS 4.8 score places this in a low-priority, hardening-class remediation bucket rather than an emergency one.
Open redirect handling in Windows BitLocker (CWE-601) lets an attacker with physical possession of a BitLocker-protected device redirect to an untrusted destination and bypass the drive-encryption security feature, with high confidentiality and integrity impact assessed at CVSS 6.1 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). The vector is unauthenticated and requires no user interaction, but the attack is strictly physical: it cannot be performed remotely or automated (CISA SSVC Automatable: no, Exploitation: none) and realistically applies to lost, stolen, or unattended hardware rather than devices kept under physical control. No public exploit identified at time of analysis, and Microsoft has shipped vendor-released patched builds for every affected Windows 10, Windows 11, and Windows Server version.
An open redirect (CWE-601) in Microsoft Active Directory Federation Services (AD FS) allows an unauthenticated remote attacker to craft an AD FS sign-in URL whose redirect parameter points to an untrusted site, so a victim who clicks the link is bounced from the trusted federation endpoint to an attacker-controlled destination - spoofing the identity provider. The assessed CVSS 3.1 base score is 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N): the attacker needs no credentials or privileges but must induce user interaction, and impact is confined to confidentiality/session or credential theft against the user rather than server compromise. No public exploit identified at time of analysis and no confirmed active exploitation (not in CISA KEV); Microsoft has released patched builds for the affected Windows Server and Windows 10 versions.
An open redirect in the Frappe Framework OAuth/social login flow lets a crafted 'state' value control where a user is sent after completing third-party authentication, so a victim who clicks an attacker-supplied login link can be bounced to an attacker-chosen site under the trusted Frappe domain. Only instances that have OAuth social login configured and enabled are affected, and exploitation requires the victim to click the link and finish authenticating at the provider (CVSS 5.1, UI:A, PR:N, S:C, with impact limited to low confidentiality/redirection). No public exploit code or confirmed active exploitation was identified at time of analysis; the issue is modest severity and best handled as routine patch-cycle work, with fixes shipped in Frappe 15.116.0 and 16.29.0.
Open redirect in PublicCMS through 5.202608.a lets unauthenticated remote attackers send users to arbitrary external sites by crafting the returnUrl parameter processed by SafeConfigComponent.getSafeUrl in the pay endpoint. Publicly available exploit code exists, and exploitation requires a victim to follow an attacker-supplied link (social engineering), with impact limited to browser redirection. The vendor was contacted but did not respond, and the independent assessment rates this as a low-priority issue despite remote reachability.
Authentication token leakage in GitLab CE/EE (all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2) allows an authenticated user who controls a Kubernetes agent to redirect the Kubernetes proxy to an unintended server, exposing sensitive authentication tokens. Exploitation requires user interaction and only affects instances using the GitLab Kubernetes agent/proxy integration; publicly available exploit code exists. This moderate-severity issue (CVSS 5.8) is not a top-tier emergency but should be patched by affected deployments.
Open redirect in SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context, enabling user-information tracking and page defacement. The vulnerability requires user interaction (UI:R) and results in low confidentiality and integrity impact with no availability impact, yielding a CVSS score of 6.1. No public exploit code has been identified at time of analysis.
An open redirect in Thelia's address-creation workflow (versions up to and including 2.6.0) lets an attacker craft a URL that carries an arbitrary external destination in the 'next' parameter; once the victim completes the 'Add New Address' form, the application redirects them to that attacker-controlled site. The flaw is remotely reachable without authentication (CVSS:3.1/AV:N/AC:L/PR:N) but requires the victim to both open the crafted link and successfully submit the form (UI:R), and it produces no server-side compromise - impact is limited to confidentiality and integrity at low severity with changed scope. EPSS is only 0.18% (7th percentile), and no public exploit code or active exploitation has been identified at time of analysis.
Open redirect in Apache CXF's OIDC relying-party component lets remote, unauthenticated attackers steer users to an attacker-controlled site by planting external URLs inside OIDC state parameters that the RP preserves and later reuses as a post-authentication redirect target. Only deployments that actually enable the OIDC relying-party code path are exposed, and a victim must be lured into initiating and completing an authentication flow through an attacker-supplied link, so exploitation is not fully automatic. Both directly encoded and double-encoded external URLs can slip past origin validation depending on which validation path runs; there is no public exploit identified at time of analysis, vendor-released fixes are available in 4.2.4, 4.1.9, and 3.6.13, and the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N reflects a low-severity redirect impact gated by mandatory user interaction.
Missing output encoding in AdonisJS HTTP Server's shared createURL() helper allows an attacker-influenced first route parameter (or wildcard segment) to escape the application's origin and produce a scheme-relative redirect target, enabling open-redirect phishing and OAuth/authentication flow abuse. Only applications running versions prior to 8.2.3 (v8 line) or 9.3.0 (v9 line) are affected, and exploitation is conditional: the app must place untrusted data in a leading dynamic path segment, generate the URL through Router.makeUrl()/urlFor() or Response.redirect().toRoute(), and use that string as a redirect destination - a victim still has to follow the crafted link (UI:R, CVSS 6.1). No public exploit code and no confirmed active exploitation were identified at time of analysis, and APIs that intentionally accept complete redirect URLs are explicitly not affected.
Open redirect in the Arista CloudVision Portal login flow (CWE-601) lets a remote, unauthenticated attacker craft a login URL that, once a victim clicks it and completes the normal authentication process, sends that user's browser to an arbitrary external site. The issue carries a CVSS 4.0 base score of 5.3 and was assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N; the attacker needs no credentials but cannot trigger the redirect without victim interaction, and impact is limited to browser redirection with low confidentiality loss - primarily useful for enabling phishing or credential theft rather than code execution or data modification. Affected releases are CloudVision Portal 2020.3.0 through <2025.3.0, 2025.3.0 ≤2025.3.3, 2026.1.0 ≤2026.1.2, and 2026.2.0; no public exploit code or confirmed active exploitation was identified at time of analysis, and a vendor patch is available per the Arista security advisory.
Open redirect in Google Chrome's AppManifest handling (all builds prior to 155.0.8059.39) lets a remote attacker abuse a crafted HTML page to bypass web origin policy, giving low-level confidentiality and integrity impact that crosses a security scope boundary. Exploitation is not automatic: the attacker must host the malicious page and socially engineer a victim into visiting and interacting with it - the assessed vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, so no authentication is needed but user interaction is mandatory, and the attacker cannot trigger the redirect without a lured, interacting victim. No public exploit identified at time of analysis: SSVC reports Exploitation: none, EPSS is 0.20% (9th percentile), and Google has released a vendor patch in Chrome 155.0.8059.39.
Unauthenticated remote attackers can steal OAuth2 authorization codes from smart-sso deployments running version 2.1.1 or earlier by abusing an unvalidated redirectUri parameter in the /login handler (CWE-601). A victim who already holds an active SSO session must be induced into opening a crafted /login link, after which the attacker - who must additionally hold any valid OAuth2 client credentials - redeems the leaked code at /oauth2/access_token to obtain the victim's access token, giving both high confidentiality and integrity impact (CVSS 7.6 v4.0: AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N; independent assessment CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). Exploitation is conditional rather than trivial: it fails if the victim has no active session, does not click the link, or if the attacker lacks valid client credentials, though no authentication to the SSO server itself is required (PR:N). No public exploit identified at time of analysis, although a public technical writeup describing the authorization-code leak path has been published; this is a genuine but conditional risk rather than a drop-everything emergency.
Improper validation of the reset_url parameter in the Checkmk Setup in-page search lets an unprivileged remote attacker craft a URL that, once opened by an authenticated user holding Setup access, executes arbitrary script in that user's session or redirects the user to an arbitrary external site - but only when the victim clicks the Reset button or submits an empty search, since the payload does not fire on page load. Affected are Checkmk releases before 2.5.0p15, before 2.4.0p38, before 2.3.0p51, and the end-of-life 2.2.0 branch; fully patched instances are not exploitable. No public exploit code has been identified at time of analysis, and exploitation depends on successful social engineering of a privileged Setup user combined with mandatory user interaction.
Open redirect flaw in the OAuth1 callback validation of Apache Allura through 1.21.0 allows unauthenticated remote attackers to redirect users to arbitrary attacker-controlled URLs during the OAuth authorization flow (CWE-601), potentially exposing authorization codes or tokens if a victim completes the flow. Exploitation is not drive-by: per the independent assessment a user must be induced to traverse the attacker-influenced OAuth request (UI:R), which lowers real-world risk below the supplied 9.1 base score; the vendor patched the issue in Allura 1.22.0, no public exploit identified at time of analysis, and EPSS is 0.15% (4th percentile), so this is assessed as a moderate real-world priority.
Insufficient validation in the Single Sign-On (SSO) login flow of Arista CloudVision lets a remote, unauthenticated attacker craft a login URL that, once clicked by a user, causes the identity provider to send IdP-issued authentication material to an attacker-controlled URL rather than to CloudVision (CWE-601 open redirect), resulting in credential/assertion theft and potential account impersonation. The vulnerability is rated High (vendor CVSS 4.0 7.6; assessed CVSS 3.1 7.6, AV:N/AC:H/PR:N/UI:R with High confidentiality and integrity impact) and only affects deployments where CloudVision SSO is configured and in use. No public exploit code or confirmed active exploitation was identified at time of analysis, and exploitation depends on victim interaction plus specific SSO/IdP configuration and the attacker's ability to produce a redirect accepted by the deployment.
Host header injection in Nezha 2.2.3's OAuth2 redirect endpoint (/api/v1/oauth2/{provider}) allows an unauthenticated remote attacker who can control the HTTP Host header on a request reaching the server to make Nezha emit an attacker-chosen redirect_uri to the configured identity provider; a victim induced to start the OAuth2 login/binding flow can then have their authorization code delivered to the attacker's origin, letting the attacker complete the flow and take over the account. The bug is a regression of the GHSA-9rc6-8cjv-rcvx fix and only manifests when the new optional dashboard_host setting is left empty, so the code no longer falls back to install_host; exploitation also requires victim interaction and an identity provider that accepts the forged redirect URI, which is why the independent assessment scores it CVSS:3.1/AV:N/AC:H/PR:N/UI:R while the vendor-style CVSS 4.0 rating is 9.3. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; no patched release version was published with the advisory, only an upstream fix commit (38824dbc11a63964c5b9296ae4c68e62b34fa04b).
Stored cross-site scripting and open redirect in Warpgate's SSO endpoints (versions prior to 0.25.5) allow an unauthenticated remote attacker to inject markup and JavaScript into the authenticated Warpgate origin. The attacker stores an arbitrary 'next' parameter via /@warpgate/api/sso/providers/:name/start, which the return handler later reflects without HTML escaping; the victim must follow the crafted link and complete an SSO login before the payload executes. Successful exploitation grants access to session data and user-level APIs, escalating to administrator APIs when the victim is a Warpgate administrator, and the same unvalidated value enables an open redirect via the GET /@warpgate/api/sso/return path. The vendor rates this 9.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), reflecting network reachability with no attacker privileges but mandatory victim interaction; no public exploit code or confirmed active exploitation was identified at time of analysis.
Credential disclosure in Apple Containerization versions before 0.41.0 allows an unauthenticated remote attacker who controls or impersonates a container registry to redirect the client's token request to an attacker-chosen host via an open redirect, leaking the victim's registry credentials. The victim must initiate a pull or authentication flow against the adversarial registry, and upgrading to 0.41.0 remediates the flaw. CISA SSVC records no known exploitation, and no public exploit code was identified at time of analysis.
Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0 expose an Administration component flaw that lets a low-privileged, network-connected user leverage another person's interaction to read or modify report data — including data belonging to products outside BI Publisher itself, per the CVSS scope-change metric. Oracle rates the issue 7.6 with high confidentiality impact and low integrity impact, and no availability impact. No EPSS score, CISA KEV listing or public proof-of-concept was included in the provided intelligence, so no public exploit is identified at time of analysis; remediation is via Oracle's September 2026 Critical Security Patch Update advisory.
OAuth Dynamic Client Registration redirect URI validation bypass in Mattermost 11.7.x (through 11.7.7), 11.8.x (through 11.8.4) and 11.9.0 lets a remote unauthenticated attacker register an OAuth client whose attacker-controlled callback host evades the configured redirect URI allowlist, so authorization responses can be sent to a host the attacker controls. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N, score 9.3) confirms no authentication is needed to register the client, but a legitimate user must still be induced to complete the OAuth authorization flow for the malicious client, which makes the attack non-automatable per SSVC (Exploitation: none, Automatable: no) despite a total technical impact rating. No public exploit code was identified at time of analysis, the issue is not in CISA KEV, and EPSS is low at 0.28% (roughly 20th percentile); the practical risk is a serious but not urgent credential/interception exposure confined to deployments that expose OAuth with Dynamic Client Registration.
Credential exfiltration in Renovate (renovatebot/renovate) before 44.11.2 lets a malicious or compromised container registry steal the registry credentials Renovate holds. When enumerating container image tags/digests, Renovate follows an HTTP Link header pagination URL and re-attaches the original registry's credentials without checking that the follow-up URL shares the same origin (CWE-601 open redirect), so a hostile registry can redirect the authenticated request to an attacker-controlled host and capture the secrets. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not in CISA KEV.
Credential exfiltration in Renovate before 44.11.2 (and Mend Renovate CE/EE images/charts before 15.4.0, enterprise-edition helm chart before 10.4.0) lets a malicious or compromised NuGet registry harvest the configured registry credentials by returning an HTTP Link header whose 'next' pagination URL points to an attacker-controlled host. Renovate followed cross-origin pagination targets without an origin check and re-attached the registry credentials, delivering them to an arbitrary attacker-chosen server. Classified as an open redirect (CWE-601); no public exploit is identified at time of analysis and it is not in CISA KEV.
Credential disclosure in Renovate before 44.11.3 allows a malicious or compromised GitHub server to exfiltrate host credentials by returning a crafted HTTP Link header. When Renovate paginates GitHub API responses (as a repository host or via the github-releases, github-tags, or git-refs datasources), it blindly follows the 'next' pagination URL without verifying it still points to the originally-contacted host, sending the configured credentials to whatever host the attacker specifies. No public exploit has been identified and the issue is not in CISA KEV, but the CVSS 4.0 base score is 9.2 due to high confidentiality impact with a scope change.
Credential exfiltration in Renovate before 44.11.3 lets a malicious or compromised GitLab server steal the authentication tokens Renovate uses to talk to it. When Renovate follows GitLab API pagination, it trusts the server-supplied Link header without validating its destination, so an attacker-controlled server can redirect the credential-bearing follow-up request to attacker infrastructure (CWE-601 open redirect). Reported by VulnCheck with a CVSS 4.0 base score of 9.2; no public exploit identified at time of analysis and no CISA KEV listing.
Open redirect in Armiya Information Technologies Access Control System (all versions before Versiyon 2) lets remote attackers craft URLs that silently redirect authenticated victims to attacker-controlled sites, enabling source-of-data spoofing and phishing. Reported by Turkey's national CSIRT (TR-CERT); no public exploit identified at time of analysis and no EPSS/KEV data is available. The vendor-assigned CVSS of 9.3 appears substantially overstated for a classic CWE-601 open redirect.
Intent redirection in Android's SetupPassthroughActivity allows a locally present, low-privilege attacker to launch arbitrary activities and escalate privileges to a higher-trust system level. Affecting Android 14 through 17 (including 16-qpr2), the flaw resides in the onCreate method of SetupPassthroughActivity.java and requires user interaction to trigger. No public exploit is identified at time of analysis, and an EPSS of 0.11% (2nd percentile) indicates minimal current exploitation probability, consistent with the SSVC exploitation-none signal.
OAuth authorization code hijacking in Stalwart Mail Server through v0.16.19 enables full email account takeover when a victim authenticates via a crafted phishing link. The validation routine for OAuth redirect URIs in the default shipped configuration - where client authentication is disabled - returns success immediately without comparing the supplied redirect_uri against any registered client destination, allowing any attacker-controlled URI to receive a valid authorization code. The CVSS 4.0 score of 8.5 with high confidentiality and integrity impact reflects the severity of resulting mailbox compromise; no public exploit code has been identified at time of analysis, though the vulnerability is fully described in a public GitHub issue with source-level detail.
JWT token disclosure in OpenMetadata's SAML and OIDC/OAuth2 authentication flows enables account takeover by exploiting an unvalidated open redirect that appends the victim's freshly issued JWT, email, and account name to an attacker-controlled URL. All 1.x releases are affected because neither SamlLoginServlet nor the OIDC/OAuth2 handler validates the caller-supplied redirect destination against any allowlist or registered callback set. An attacker who socially engineers a victim into clicking a crafted login URL can capture the full JWT upon successful authentication and immediately assume control of that account via the OpenMetadata API. No public exploit has been identified at time of analysis, and no CISA KEV listing is confirmed.
Unauthenticated OAuth redirect URI hijacking in Coroot versions 1.20.2 through 1.24.5 allows attackers to register malicious MCP OAuth clients without any credentials, then capture authorization codes from signed-in users who follow crafted authorization URLs and approve a consent dialog. The captured codes can be exchanged for valid access tokens, enabling full MCP session hijacking. No public exploit has been identified at time of analysis and no CISA KEV listing is present, but the registration step requires no authentication, materially lowering attacker prerequisites.
OAuth redirect URI validation in Ech0 through 4.5.6 allows session hijacking via exchange-code theft by exploiting incomplete allowlist enforcement. The `parseAndValidateClientRedirect` function at `internal/service/auth/auth.go:448` compares only scheme and host of the client-supplied `redirect_uri` against the admin allowlist, ignoring path, query, and fragment in violation of RFC 6749 §3.1.2. An attacker who induces a victim to follow a crafted OAuth login link can redirect the post-authentication browser to any path on an allowlisted host, exposing the one-time exchange code via Referer headers or analytics, then redeem it at `POST /api/auth/exchange` for the victim's access and refresh tokens. No public exploit or CISA KEV listing is confirmed at time of analysis; a detailed public advisory (GHSA-p64j-f4x9-wq66) with source code evidence lowers the bar for independent exploitation. Fixed in 4.7.3.
Server-side request forgery in the Unstructured-IO `unstructured` library (0.4.7 through versions before 0.24.0) lets an attacker who controls the `url=` argument of partition(), partition_html(), or partition_md() coerce a server-side ingestion service into fetching loopback, internal, or cloud-metadata endpoints, with the response returned as Element text. Because ingestion pipelines commonly accept user-supplied URLs, unauthenticated remote abuse is realistic (CVSS 9.3). No public exploit identified at time of analysis; the flaw is fixed in 0.24.0 via a centralized fetch helper.
Full takeover of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 is possible when a remote unauthenticated attacker over HTTP lures an authorized user into interacting with malicious content, exploiting a flaw in the Installation and Configuration component. Because the vulnerability carries a scope change, successful exploitation can extend beyond Hyperion to significantly impact other integrated products, yielding complete confidentiality, integrity, and availability compromise. Oracle rates it CVSS 9.6; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Reflected JavaScript injection and open redirect in MyBB forum software before 1.8.40 lets a remote attacker execute script in a victim's browser session. The Contact module (contact.php) takes a redirect target from the 'from' request parameter or the Referer header and passes it to redirect() without validating the URL scheme, so a javascript: URI can be delivered as the destination of the post-submission 'Click here if you don't want to wait any longer' link. CVSS is 9.3; no public exploit identified at time of analysis, and the flaw requires the victim to click the crafted link.
Open redirect in the Grav API plugin (grav-plugin-api) before 1.0.14, bundled with Grav 2.0's admin-next/API stack, allows post-login phishing via a backslash normalization bypass in SsoController::sanitizeReturnTo(). An attacker who can send a crafted OAuth login URL to an authenticated admin victim can supply a returnTo value such as '/\evil.com' that passes the guard rejecting '//' prefixes but is silently normalized by the browser into the protocol-relative URL '//evil.com', redirecting the victim to an attacker-controlled site immediately after a legitimate login. No public exploit has been identified at time of analysis, though the backslash-normalization technique is a well-documented browser behavior; the vendor advisory references a fix in version 1.0.14.
Recursive arbitrary directory deletion in OpenEMR before 8.2.0 is achievable by an unauthenticated attacker through a two-vulnerability chain: a path traversal flaw in standard_tables_manage.php allows the db GET parameter - passed unsanitized to temp_dir_cleanup() - to resolve outside the intended PHP temporary directory, while an open redirect in dicom_frame.php enables delivery of a crafted URL that triggers this deletion inside an authenticated Superuser's active session. The patch is confirmed in OpenEMR 8.2.0 (released 2026-07-08); no active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis. The potential for irreversible mass deletion of patient records and EHR runtime data makes this a high-priority patching target despite the social-engineering prerequisite.
Token content validation bypass in SAP Approuter (node.js package < 23.0.0) enables an unauthenticated remote attacker to exfiltrate sensitive credential material to an attacker-controlled destination by submitting a specially crafted token. The flaw, classified as CWE-601 (Open Redirect), exploits insufficient URL or destination validation within the Approuter's token-processing logic under specific non-default configurations, yielding high confidentiality impact and low integrity and availability impact. No public exploit or active exploitation is confirmed at time of analysis; vendor patch is available via SAP Approuter 23.0.0 per SAP Security Note 3786038.
Open redirect in Grav's form plugin (getgrav/grav-plugin-form) versions 9.1.11 through 9.1.12 allows unauthenticated form submitters to cause the server to issue a 302 redirect to an arbitrary external URL, enabling phishing attacks against site visitors. The vulnerability exists because the redirect process action, introduced in v9.1.11, evaluates user-supplied form field values through Twig expressions without sanitizing the resulting URL, and Grav::redirect() passes that output to the browser without origin validation. No public exploit code has been identified at time of analysis, and no active exploitation is confirmed in CISA KEV, though the low attack complexity and zero-authentication requirement make this straightforward to abuse against any site with a susceptible form blueprint.
Server-Side Request Forgery in Google mcp-toolbox versions 0.3.0 through 1.4.0 lets remote attackers coerce the toolbox into making unauthorized requests to internal or arbitrary endpoints by supplying a crafted path parameter that triggers an open redirect or destination swap on the backend. Because the HTTP client in internal/sources/http/http.go was initialized without a CheckRedirect policy or target-IP validation, baseline parameter sanitization is bypassed once the server follows the redirect. There is no public exploit identified at time of analysis (CVSS 4.0 carries E:U, Exploit Unproven), and the flaw is notably reachable via malicious data-driven LLM prompts, not just direct attacker input.
Open redirect in IBM Planning Analytics Local versions 2.1.0 through 2.1.21 lets remote attackers craft URLs that bounce authenticated users to attacker-controlled external sites. When the product is deployed with SSO authentication, the redirect can leak session tokens carried in the flow, enabling session hijacking. No public exploit identified at time of analysis; this is not on CISA KEV and no POC is referenced in the provided data.
Open redirect in MISP installation scripts allows unauthenticated remote attackers to craft malicious URLs that leverage a missing trailing slash in the Apache HTTP-to-HTTPS redirect directive. When a user follows a crafted link on the legitimate MISP domain, the redirect appends attacker-controlled path content directly to the hostname, causing the browser to interpret the attacker’s domain as the destination host. This can lead to phishing and credential collection, though no active exploitation has been identified and a vendor patch is available.
Server-side request forgery in PHPOffice PhpSpreadsheet (>= 4.0.0 through 5.8.0, plus older branches back to 2.0.0) lets an attacker bypass the WEBSERVICE() domain whitelist introduced in 5.4.0 by chaining through an HTTP 302/301 redirect. Because the whitelist only validates the initial URL host while file_get_contents() silently follows redirects without re-validation, an attacker who can upload a crafted XLSX to an app that calls setDomainWhiteList() and getCalculatedValue() can pivot to internal-only targets and read the full HTTP response (up to 32,767 bytes) as a cell value. Publicly available exploit code exists (a full PoC and lab reproduction are in the GitHub advisory); no public exploit identified as actively used in the wild and it is not in CISA KEV.
Server-Side Request Forgery (SSRF) and open redirect in Next.js rewrite/redirect rules when the destination hostname is dynamically constructed from user-controlled input. Versions 12.0.0 to 15.5.20 and 16.0.0 to 16.2.10 are affected, allowing a remote attacker to proxy requests to arbitrary hosts or redirect users. Patched versions 15.5.21 and 16.2.11 are available; no active exploitation has been reported.
DOM-based cross-site scripting in Unblu Spark, reachable via an open-redirect flaw (CWE-601), lets remote attackers execute arbitrary JavaScript in a victim's browser after luring them to a crafted link. When Spark runs with com.unblu.identifier.siteEmbeddedSetup=true it shares the host application's origin, so injected script inherits full access to the host app's cookies, DOM, and same-origin APIs, expanding the blast radius well beyond Unblu itself and driving the CRITICAL 9.3 (CVSS 4.0) rating for on-prem embedded deployments. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Account/application takeover in Oracle WebCenter Content: Imaging (Core component of Fusion Middleware) affects supported versions 12.2.1.4.0 and 14.1.2.0.0, where a remote unauthenticated attacker who lures a legitimate user into interacting with malicious content over HTTP can fully compromise the Imaging application. Oracle rates it CVSS 3.1 7.5 with high confidentiality, integrity, and availability impact, but flags it as difficult to exploit (AC:H) and dependent on user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; a fix ships in the Oracle July 2026 Critical Patch Update.
Unauthorized access to critical data in Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 is possible via the bundled OpenSearch Dashboards component, where a remote unauthenticated attacker can compromise confidentiality by luring a victim into interacting with attacker-supplied content (UI:R). The scope-change and confidentiality-only vector (S:C/C:H/I:N/A:N), combined with the vendor's 'Authentication Bypass' tag, is characteristic of a client-side flaw such as cross-site scripting in the Dashboards UI that lets an attacker read data across products the victim can reach. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; it is addressed in Oracle's July 2026 Critical Patch Update.
Cross-site-scripting-style compromise of Oracle PeopleSoft Enterprise PeopleTools 8.62 (PIA Core Technology) lets a remote, unauthenticated attacker who lures an authenticated user into interacting with a crafted HTTP request achieve limited read/write access to PeopleSoft data and cause partial denial of service. The scope-change flag (S:C) means the impact can extend beyond PeopleTools into additional integrated products. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; CVSS 3.1 base score is 7.1.
Full takeover of Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) is possible when an unauthenticated remote attacker abuses a flaw in the Metadata Plugin component over HTTPS and induces an authorized user to interact with attacker-controlled content. Because the compromise yields high confidentiality, integrity, and availability impact against a central management console for Oracle estates, one successful attack can hand an adversary control of the platform. There is no public exploit identified at time of analysis and no CISA KEV listing, but the low attack complexity and unauthenticated network vector make it a priority patch in this quarter's Oracle Critical Patch Update.
Open redirect and token-theft in dataCycle-CORE (all versions up to and including 25.07.3) lets a low-privileged authenticated API user inject attacker-controlled `forwardToUrl` and `redirectUrl` parameters into password-reset and confirmation email flows, which lack host allowlisting. Because a live reset/confirmation token can be appended to an attacker-controlled destination, and users are redirected off-site after completing a reset, an attacker can capture tokens, hijack confirmations, and stage convincing phishing from a trusted-domain email. No public exploit or CISA KEV listing exists at time of analysis; the issue is fixed in 26.06.08.
Session token theft in SigNoz through 0.133.0 lets unauthenticated attackers hijack any user account on instances configured with Google OAuth, SAML, or OIDC single sign-on. Because the unauthenticated sessions-context endpoint accepts an attacker-controlled 'ref' parameter that is embedded unvalidated into the SSO state/redirect, an attacker crafts a login URL that returns the victim's access and refresh tokens to an attacker-controlled host once the victim completes SSO. Reported by VulnCheck (CWE-601, open redirect), publicly available exploit code exists, though it is not listed in CISA KEV and EPSS was not provided.
Reflected cross-site scripting in MantisBT 2.28.3 and earlier lets remote attackers inject HTML into the unauthenticated /admin/install.php installer page through six user-supplied parameters echoed via an unescaped printf format string. Because the application ships a script-src 'self' Content Security Policy that lacks a form-action directive, an attacker cannot run inline JavaScript but can render fake credential-harvesting login forms, perform <meta>-based open redirects, and overlay attacker HTML via CSS injection on the legitimate admin page. There is no public exploit identified at time of analysis, no CISA KEV listing, and no CVSS/EPSS score in the provided data; the issue was reported by watchTowr and fixed in 2.28.4.
Reflected cross-site scripting in MantisBT's /admin/install.php (versions 2.28.3 and earlier) lets remote attackers inject HTML through six unescaped, user-supplied parameters echoed by print_test_result(). Although the page's Content-Security-Policy (script-src 'self') blocks inline JavaScript, the missing form-action directive permits credential-phishing form injection, <meta>-based open redirects, and CSS overlay attacks against the trusted admin origin. The advisory states no authentication is required; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Password reset token poisoning in the Grav API plugin (grav-plugin-api) before 1.0.4 lets an unauthenticated attacker hijack the account recovery flow by supplying an attacker-controlled host in the admin_base_url field (or Referer/Origin headers) of the POST /api/v1/auth/forgot-password request. Because the reset email's link is built from this unvalidated host, a victim who clicks it leaks a valid, unexpired reset token to the attacker, yielding full account takeover. No public exploit is identified at time of analysis, and it is not in CISA KEV, but VulnCheck's advisory and vendor GHSA-5xc4-j99p-cp4m confirm the flaw and a 1.0.4 fix.
Unauthorized access in SAP Approuter arises because the component fails to validate incoming request headers during the OAuth2 login flow under certain configurations (CWE-601, open redirect). An unauthenticated remote attacker who lures a victim into clicking a crafted link can hijack the authentication flow to gain high-confidentiality and high-integrity access to the application. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the network-reachable, low-complexity nature (CVSS 8.1) makes it a meaningful patch priority for SAP BTP/Cloud Foundry environments.
Token theft via open redirect in the Authorizer identity server (authorizerdev/authorizer) lets an unauthenticated attacker steal a logged-in victim's OAuth/OIDC tokens. The /authorize endpoint fails to validate the redirect_uri against AllowedOrigins, so with response_type=token or id_token the server appends access_token, id_token, and refresh_token to any attacker-supplied URL via a 302 redirect. Detailed reproduction steps are public in advisory GHSA-h29v-hj44-q8cv, and the required client_id is trivially harvested from the unauthenticated /graphql meta query; no active exploitation is confirmed in CISA KEV at time of analysis.
Privilege elevation in Microsoft 365 Copilot arises from an open redirect (CWE-601) that lets an unauthenticated remote attacker craft a Copilot-hosted URL that forwards a victim to an attacker-controlled site. Per the CVSS vector this requires the victim to interact (UI:R) with the malicious link and results in a scope change with high confidentiality and integrity impact, consistent with token/credential capture enabling elevated access. There is no public exploit identified at time of analysis (Exploit Maturity: Unproven), and it is not listed in CISA KEV; Microsoft rates it 9.3 and reports an official fix is available.
Account impersonation in Budibase 3.37.2 through 3.38.x allows attackers with a Slack, Discord, or MS Teams account in the same workspace to silently bind their external chat identity to any authenticated Budibase user who clicks a crafted link. Because the `/api/chat-links/:instance/:token/handoff` endpoint performs a permanent state-changing write with no consent UI and no CSRF token, a successful link grants the attacker full impersonation through the AI chat agent, reading data and triggering automations as the victim. No public exploit identified at time of analysis beyond the detailed proof-of-concept in the GHSA advisory authored by the reporter.
Privilege elevation in Microsoft 365 Copilot's Business Chat is possible when an attacker abuses an open redirect (CWE-601) to coerce a victim into following a crafted link that lands on an attacker-controlled site. With a CVSS 3.1 base score of 8.8 and high impact across confidentiality, integrity, and availability, successful exploitation lets an unauthorized remote attacker elevate privileges over the network after user interaction. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Account takeover in Oracle iSupplier Portal (E-Business Suite versions 12.2.3-12.2.15) allows a low-privileged remote attacker to fully compromise the application by tricking a separate user into interacting with attacker-supplied content over HTTPS. The Home Page component is the entry point, and successful exploitation yields full confidentiality, integrity, and availability impact on the portal. No public exploit identified at time of analysis, but Oracle's critical patch advisory confirms the issue is real and patchable.
Cross-context compromise of Oracle WebCenter Content 14.1.2.0.0 (Content Server component) allows a remote unauthenticated attacker over HTTPS to gain high-impact read access and limited write access to managed content, with effects that cross trust boundaries into additional Oracle Fusion Middleware products (scope change). Exploitation requires a victim to interact with attacker-controlled input (UI:R), and at the time of analysis there is no public exploit identified and the issue is not listed in CISA KEV.
Server takeover in Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0 (Console component) allows a remote unauthenticated attacker who can lure an authenticated user into interacting with a crafted HTTP request to fully compromise the server with a scope change to other products. CVSS 8.3 reflects high impact tempered by high attack complexity and required user interaction; no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Full takeover of Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 is achievable by remote unauthenticated attackers via the Console component over HTTPS, provided a victim performs an action such as clicking a malicious link. The flaw carries a CVSS 3.1 base score of 8.8 with high impact across confidentiality, integrity, and availability, but exploitation hinges on user interaction. No public exploit identified at time of analysis, and the issue is not currently listed in CISA KEV.
Cross-scope data compromise in Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 allows a low-privileged remote attacker over HTTPS to read, create, modify, or delete critical data through the administration Console, provided a separate user is induced to perform an action. The CVSS 3.1 base score of 8.7 reflects high confidentiality and integrity impact with scope change reaching beyond WebLogic itself, and no public exploit identified at time of analysis.
Credential leakage in Erlang/OTP's inets httpc client (versions 17.0 through 29.0.2, 28.5.0.2, and 27.3.4.13) allows attacker-controlled servers to harvest Authorization and Proxy-Authorization headers by issuing cross-origin 3xx redirects. Because httpc_response:redirect/2 only updates the host field and copies all other headers verbatim - and autoredirect defaults to true - any httpc caller using HTTP Basic auth or URL userinfo silently forwards credentials to the redirect target. No public exploit identified at time of analysis, but the fix has been published upstream and tagged in vendor-released OTP patch versions.
Open redirect bypass in Apache Airflow 3.0.0 through 3.2.1 allows remote unauthenticated attackers to craft URLs that evade the `is_safe_url` host check by using triple-slash (`///`), backslash, or URL-encoded backslash prefixes, redirecting victims to attacker-controlled domains. The flaw stems from a parsing inconsistency between WHATWG URL semantics and Python's urllib. No public exploit has been identified at time of analysis, and EPSS rates exploitation probability at only 0.01% (4th percentile).
Server-side request forgery in Typebot versions 3.15.2 and prior allows authenticated users to bypass the validateHttpReqUrl() SSRF filter by chaining an attacker-controlled HTTP 302 redirect, since the underlying ky and fetch clients follow redirects without re-validating the destination. This enables reaching AWS instance metadata at 169.254.169.254, private subnets, and container-internal services from the Typebot server, with realistic impact including theft of cloud IAM credentials. No public exploit identified at time of analysis, and the issue is fixed in version 3.16.0.
Open redirect in Red Hat build of Keycloak permits remote attackers to send victims to attacker-controlled hosts by abusing a parser discrepancy between Keycloak and Java's URI implementation during redirect URL validation. The flaw applies only to clients configured with a wildcard ('*') in the 'Valid Redirect URIs' field and requires the victim to click a crafted link, with no public exploit identified at time of analysis.
Server-Side Request Forgery in Budibase self-hosted instances allows authenticated Global Builder users to bypass SSRF protections via trivial substring manipulation in plugin URL uploads. The vulnerability exploits a flawed validation check that accepts any URL containing '.tar.gz' anywhere in the string, enabling requests to internal cloud metadata services (AWS IMDS at 169.254.169.254), CouchDB, Redis, and private network ranges when chained with the BLACKLIST_IPS bypass (CVE-2026-45060) or via HTTP redirect chains. CVSS 7.7 (High) with Changed Scope indicates cross-boundary impact from application to infrastructure layer. Vendor-released patch available in version 3.35.10 per GitHub security advisory GHSA-xh5j-727m-w6gg. EPSS data not available; no CISA KEV listing at time of analysis. Publicly available exploit code exists in researcher's GitHub repository with Docker-based proof-of-concept.
Open redirect vulnerability in Snipe-IT versions prior to 8.4.1 allows authenticated attackers to redirect users to malicious sites by poisoning the session-stored HTTP Referer header, enabling phishing, session hijacking, and malware distribution attacks. Exploitation requires prior session poisoning and user interaction (clicking a form submission), limiting real-world practical impact despite moderate CVSS score of 5.9. Vendor-released patch available in version 8.4.1.
Open redirect vulnerability in DivvyDrive 4.8.2.9 through 4.8.3.1 allows remote unauthenticated attackers to redirect users to malicious sites via parameter injection, achieving high-severity impact across confidentiality, integrity, and availability with scope change. The CVSS 9.6 (Critical) score reflects cross-site scope change and combined impacts, though typical open redirect attacks involve phishing rather than direct system compromise. TR-CERT published this vulnerability with vendor coordination through Turkish national CERT.
Cross-host HTTP redirects in Microsoft Kiota HTTP client libraries leak session cookies, proxy credentials, and custom authentication headers to attacker-controlled domains. When Kiota's RedirectHandler middleware follows 3xx redirects to different hosts (e.g., trusted.example.com → evil.attacker.com), it strips the Authorization header but forwards Cookie, Proxy-Authorization, and all custom headers unchanged. Publicly available exploit code exists with a complete proof-of-concept demonstrating cookie exfiltration to malicious redirect targets. This affects all Kiota language implementations (Java, .NET, Python, TypeScript, Go) and downstream consumers including Microsoft Graph SDK for Java. The vulnerability requires user interaction to trigger the initial API request, but once triggered, credential leakage is automatic on cross-origin redirects (CVSS:4.0 AV:N/AC:L/AT:P/PR:N/UI:P). Vendor-released patches are available across all affected package ecosystems.
Privilege elevation in Microsoft 365 Copilot via an open redirect (CWE-601) lets an unauthenticated remote attacker abuse the AI assistant's URL-handling to bounce a victim to an attacker-controlled site and elevate privileges over the network. Rated CVSS 9.3 with a scope-changed vector because the redirect crosses a trust boundary, though exploitation requires the victim to interact (click) with the crafted link. No public exploit identified at time of analysis and EPSS is very low (0.04%), indicating no observed real-world exploitation despite the high severity score.
Information disclosure via server-side request forgery in GitHub Enterprise Server (all versions prior to 3.21) lets an unauthenticated attacker read sensitive environment variables from the appliance. The notebook rendering service follows HTTP redirects without revalidating the destination host, so an attacker who chains the instance's open-redirect endpoint can reach internal services and, using regex filter queries against an internal API combined with response-timing measurement, exfiltrate secret values one character at a time. No public exploit is identified at time of analysis and EPSS is very low (0.05%), but SSVC rates the technical impact as total.
Password reset poisoning in LinkAce (self-hosted link archive by Kovah) before 2.5.4 allows a remote attacker to hijack accounts by injecting a malicious host into reset URLs. Because the app trusts the X-Forwarded-Host header when building password reset links, an attacker who triggers a reset for a victim can cause the emailed link to point to an attacker-controlled domain; if the victim clicks it, the valid reset token leaks to the attacker, enabling full account takeover. No public exploit identified at time of analysis, and EPSS is very low (0.03%), consistent with SSVC exploitation status of 'none'.
Cross-origin request body replay in OpenClaw's fetchWithSsrFGuard function before version 2026.3.31 enables attackers to exfiltrate sensitive request data and headers to unintended origins through redirect manipulation. The vulnerability requires user interaction and allows high confidentiality impact through unsafe request body transmission across origin boundaries. Affects unauthenticated contexts. No public exploit identified at time of analysis, with low observed exploitation activity (EPSS <1%).
Open redirect vulnerability in HPE Aruba Networking Private 5G Core On-Prem GUI enables credential harvesting attacks against authenticated users. Remote attackers can craft malicious URLs that redirect victims from the legitimate login flow to attacker-controlled phishing pages designed to capture credentials. With CVSS 8.8 (High) severity and network-reachable attack surface requiring no authentication, this represents significant phishing risk for organizations deploying private 5G infrastructure. No public exploit identified at time of analysis, though exploitation requires minimal technical complexity.
Open redirect in Hoppscotch API development platform prior to version 2026.3.0 enables token exfiltration leading to complete account takeover. Attackers can craft malicious URLs that redirect authenticated users to attacker-controlled domains, stealing authentication tokens in transit. The vulnerability requires no authentication and minimal attack complexity (CVSS:4.0 AV:N/AC:L/PR:N), though user interaction is required (UI:A). No public exploit code or active exploitation confirmed at time of analysis, though the attack pattern is well-understood for CWE-601 vulnerabilities.
Open redirect in Red Hat Build of Keycloak allows authenticated attackers with control over another path on the same web server to bypass wildcard-based redirect URI validation and steal OAuth access tokens. Attack requires low complexity and user interaction (CVSS 7.3). EPSS and KEV status not available; no public exploit identified at time of analysis. This CWE-601 flaw enables token theft through maliciously crafted redirect flows, posing significant risk to SSO deployments where Keycloak shares a web server with attacker-controllable content.
Pocket ID versions 2.0.0 through 2.3.x suffer from improper callback URL validation that allows attackers to bypass redirect URI restrictions using URL userinfo characters (@), enabling authorization code interception. An attacker can craft a malicious authorization link to redirect authentication codes to an attacker-controlled server if a user is tricked into clicking it. Public exploit code exists for this vulnerability, and no patch is currently available.
ZITADEL versions 4.0.0-rc.1 through 4.7.0 are vulnerable to open redirect attacks through improper validation of the Forwarded and X-Forwarded-Host headers used in password reset links. An attacker can craft a malicious request to redirect users to an attacker-controlled domain when they click password reset confirmation links, enabling credential harvesting or phishing attacks. The vulnerability affects all deployments using affected versions and has been patched in version 4.7.1.
Host header injection in Internet Routing Registry daemon (IRRd) 4.4.0-4.4.4 and 4.5.0 allows remote attackers to redirect password reset and account creation confirmation links to attacker-controlled domains, enabling account takeover of IRR database maintainer accounts. Successfully exploited accounts can modify routing policy objects (RPSL) in the IRR database. EPSS score of 0.06% (18th percentile) indicates low predicted exploitation probability. Vendor patches available in versions 4.4.5 and 4.5.1.
Traccar GPS tracking system through version 6.11.1 allows authenticated users to hijack OAuth 2.0 authorization codes through unvalidated redirect URIs in OIDC endpoints, enabling account takeover on integrated applications. The vulnerability stems from missing whitelist validation on the redirect_uri parameter, permitting attackers to exfiltrate authorization codes to attacker-controlled servers. Public exploit code exists for this HIGH severity flaw, and no patch is currently available.
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 76.4%.
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.5%.
Host header injection in Nezha 2.1.0 through 2.3.14 lets an attacker who can control or spoof the Host header on a victim's MCP request redirect file uploads and capture one-time download tokens that can be replayed to exfiltrate files. The flaw is in mintTransferTool, which builds the fs.download_url and fs.upload_url transfer links from the unvalidated Host header, so the observable impact is limited to low confidentiality and integrity loss rather than code execution. Exploitation is unauthenticated per the CVSS vector (PR:N) but conditional on the attacker influencing the reflected Host value - for example through a misconfigured or trusting reverse proxy, DNS rebinding, or a man-in-the-middle position on the victim's path - and on the victim actually invoking the MCP transfer tools. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has shipped a fix in Nezha 2.3.15.
Open redirect in Scoold, Erudika's Java-based Q&A and knowledge-sharing platform, affects every release prior to 1.69.1, where the backto and returnto parameters handled by HttpUtils.getBackToUrl() are validated with a case-insensitive prefix match against the configured server URL. An unauthenticated attacker can craft a sign-in link whose backto value is an absolute URL on a look-alike host such as example.com.evil.com; URI.resolve() retains the attacker URL, the prefix check passes, and the victim is redirected to the attacker's domain after completing authentication. The result is phishing and possible credential or token theft on the malicious site, but exploitation hinges on the victim following the crafted link and signing in (UI:R); no public exploit code and no confirmed active exploitation have been identified at time of analysis.
Open redirect in the Creema handmade marketplace mobile apps for Android and iOS lets a crafted URL cause the app to render an attacker-controlled web page inside its own in-app screen, enabling convincing phishing pages that appear to originate from a trusted app. The flaw requires the victim to actively open a malicious link (UI:A/UI:R) and no authentication is needed (PR:N), but impact is limited to integrity of displayed content (C:N/I:L/A:N), with no code execution or direct data compromise; CVSS base score is 5.1 (medium). There is no public exploit identified at time of analysis and no confirmed active exploitation (not in CISA KEV), though JPCERT/CC has published the issue as JVN48627289 and users of both platform apps are exposed regardless of app version because the vendor CPE entries are version-agnostic.
Gogs (self-hosted Git service) prior to 0.15.0+dev contains an open redirect in the /redirect endpoint and other post-action redirect flows that allows unauthenticated attackers to send victims to arbitrary external sites from a trusted Gogs domain. The flaw arises because internal/urlx/urlx.go IsSameSite evaluates a normalized copy of the redirect target while cmd/gogs/internal/web/web.go getRedirect and similar callers emit the original, unnormalized value in the Location header; a literal backslash ('\'), a percent-encoded backslash (%5C/%5c), or embedded tab/CR/LF causes browsers to resolve the emitted value as a scheme-relative external URL. Per the independent assessment the issue is medium severity (CVSS 4.0 base 5.3; CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), requires victim interaction (a click on a crafted link), and grants no access to the Gogs server itself; no public exploit code has been identified at time of analysis and the CVE is not in CISA KEV.
Open redirect in the nextjs-auth0 SDK before version 4.32.0 allows remote unauthenticated attackers to redirect users to an arbitrary external domain after authentication by crafting a malicious returnTo parameter that passes the SDK's same-origin check but is later reconstructed into a scheme-relative or absolute URL. Exploitation requires the victim to click an attacker-supplied authentication link and complete the login flow (CVSS vector includes UI:R), limiting impact to redirection with no direct code execution or data read on the host. No public exploit code or active exploitation (CISA KEV) has been identified, and a vendor patch is available in version 4.32.0.
Open redirect in Active Directory Federation Services (AD FS) allows an authenticated attacker to craft a federation/redirect URL that sends a victim to an attacker-controlled site while appearing to originate from a trusted AD FS endpoint. Only Windows systems with the AD FS role configured and reachable by users or the internet are affected - Windows Server 2016, 2019, 2022 and 2025 (including Server Core) plus Windows 10 1607 and 1809 builds below their listed fixed build numbers. Exploitation requires an authorized/high-privilege AD FS actor and a victim who interacts with the crafted URL, and the resulting impact is limited to spoofing (low confidentiality and integrity, no availability impact); there is no public exploit identified at time of analysis, KEV status is negative, and the moderate CVSS 4.8 score places this in a low-priority, hardening-class remediation bucket rather than an emergency one.
Open redirect handling in Windows BitLocker (CWE-601) lets an attacker with physical possession of a BitLocker-protected device redirect to an untrusted destination and bypass the drive-encryption security feature, with high confidentiality and integrity impact assessed at CVSS 6.1 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). The vector is unauthenticated and requires no user interaction, but the attack is strictly physical: it cannot be performed remotely or automated (CISA SSVC Automatable: no, Exploitation: none) and realistically applies to lost, stolen, or unattended hardware rather than devices kept under physical control. No public exploit identified at time of analysis, and Microsoft has shipped vendor-released patched builds for every affected Windows 10, Windows 11, and Windows Server version.
An open redirect (CWE-601) in Microsoft Active Directory Federation Services (AD FS) allows an unauthenticated remote attacker to craft an AD FS sign-in URL whose redirect parameter points to an untrusted site, so a victim who clicks the link is bounced from the trusted federation endpoint to an attacker-controlled destination - spoofing the identity provider. The assessed CVSS 3.1 base score is 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N): the attacker needs no credentials or privileges but must induce user interaction, and impact is confined to confidentiality/session or credential theft against the user rather than server compromise. No public exploit identified at time of analysis and no confirmed active exploitation (not in CISA KEV); Microsoft has released patched builds for the affected Windows Server and Windows 10 versions.
An open redirect in the Frappe Framework OAuth/social login flow lets a crafted 'state' value control where a user is sent after completing third-party authentication, so a victim who clicks an attacker-supplied login link can be bounced to an attacker-chosen site under the trusted Frappe domain. Only instances that have OAuth social login configured and enabled are affected, and exploitation requires the victim to click the link and finish authenticating at the provider (CVSS 5.1, UI:A, PR:N, S:C, with impact limited to low confidentiality/redirection). No public exploit code or confirmed active exploitation was identified at time of analysis; the issue is modest severity and best handled as routine patch-cycle work, with fixes shipped in Frappe 15.116.0 and 16.29.0.
Open redirect in PublicCMS through 5.202608.a lets unauthenticated remote attackers send users to arbitrary external sites by crafting the returnUrl parameter processed by SafeConfigComponent.getSafeUrl in the pay endpoint. Publicly available exploit code exists, and exploitation requires a victim to follow an attacker-supplied link (social engineering), with impact limited to browser redirection. The vendor was contacted but did not respond, and the independent assessment rates this as a low-priority issue despite remote reachability.
Authentication token leakage in GitLab CE/EE (all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2) allows an authenticated user who controls a Kubernetes agent to redirect the Kubernetes proxy to an unintended server, exposing sensitive authentication tokens. Exploitation requires user interaction and only affects instances using the GitLab Kubernetes agent/proxy integration; publicly available exploit code exists. This moderate-severity issue (CVSS 5.8) is not a top-tier emergency but should be patched by affected deployments.
Open redirect in SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context, enabling user-information tracking and page defacement. The vulnerability requires user interaction (UI:R) and results in low confidentiality and integrity impact with no availability impact, yielding a CVSS score of 6.1. No public exploit code has been identified at time of analysis.
An open redirect in Thelia's address-creation workflow (versions up to and including 2.6.0) lets an attacker craft a URL that carries an arbitrary external destination in the 'next' parameter; once the victim completes the 'Add New Address' form, the application redirects them to that attacker-controlled site. The flaw is remotely reachable without authentication (CVSS:3.1/AV:N/AC:L/PR:N) but requires the victim to both open the crafted link and successfully submit the form (UI:R), and it produces no server-side compromise - impact is limited to confidentiality and integrity at low severity with changed scope. EPSS is only 0.18% (7th percentile), and no public exploit code or active exploitation has been identified at time of analysis.
Open redirect in Apache CXF's OIDC relying-party component lets remote, unauthenticated attackers steer users to an attacker-controlled site by planting external URLs inside OIDC state parameters that the RP preserves and later reuses as a post-authentication redirect target. Only deployments that actually enable the OIDC relying-party code path are exposed, and a victim must be lured into initiating and completing an authentication flow through an attacker-supplied link, so exploitation is not fully automatic. Both directly encoded and double-encoded external URLs can slip past origin validation depending on which validation path runs; there is no public exploit identified at time of analysis, vendor-released fixes are available in 4.2.4, 4.1.9, and 3.6.13, and the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N reflects a low-severity redirect impact gated by mandatory user interaction.
Missing output encoding in AdonisJS HTTP Server's shared createURL() helper allows an attacker-influenced first route parameter (or wildcard segment) to escape the application's origin and produce a scheme-relative redirect target, enabling open-redirect phishing and OAuth/authentication flow abuse. Only applications running versions prior to 8.2.3 (v8 line) or 9.3.0 (v9 line) are affected, and exploitation is conditional: the app must place untrusted data in a leading dynamic path segment, generate the URL through Router.makeUrl()/urlFor() or Response.redirect().toRoute(), and use that string as a redirect destination - a victim still has to follow the crafted link (UI:R, CVSS 6.1). No public exploit code and no confirmed active exploitation were identified at time of analysis, and APIs that intentionally accept complete redirect URLs are explicitly not affected.
Open redirect in the Arista CloudVision Portal login flow (CWE-601) lets a remote, unauthenticated attacker craft a login URL that, once a victim clicks it and completes the normal authentication process, sends that user's browser to an arbitrary external site. The issue carries a CVSS 4.0 base score of 5.3 and was assessed as CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N; the attacker needs no credentials but cannot trigger the redirect without victim interaction, and impact is limited to browser redirection with low confidentiality loss - primarily useful for enabling phishing or credential theft rather than code execution or data modification. Affected releases are CloudVision Portal 2020.3.0 through <2025.3.0, 2025.3.0 ≤2025.3.3, 2026.1.0 ≤2026.1.2, and 2026.2.0; no public exploit code or confirmed active exploitation was identified at time of analysis, and a vendor patch is available per the Arista security advisory.
Open redirect in Google Chrome's AppManifest handling (all builds prior to 155.0.8059.39) lets a remote attacker abuse a crafted HTML page to bypass web origin policy, giving low-level confidentiality and integrity impact that crosses a security scope boundary. Exploitation is not automatic: the attacker must host the malicious page and socially engineer a victim into visiting and interacting with it - the assessed vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, so no authentication is needed but user interaction is mandatory, and the attacker cannot trigger the redirect without a lured, interacting victim. No public exploit identified at time of analysis: SSVC reports Exploitation: none, EPSS is 0.20% (9th percentile), and Google has released a vendor patch in Chrome 155.0.8059.39.