#cwe-601

共收录 381 条相关情报。

← 返回所有主题

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL withi...

CVE-2026-54215

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-07 发布INFO

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modification of the Conte...

CVE-2026-54214

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL par

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-07 发布INFO

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using ...

CVE-2026-12071

The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-06 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to naviga...

CVE-2026-66829

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-08-06 发布INFO

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to retarget a form a...

CVE-2026-66370

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-08-06 发布INFO

html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection

CVE-2026-66829

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

安全公告2026-08-06 发布INFO

html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking

CVE-2026-66370

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

漏洞预警2026-08-03 发布INFO

The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the redirect process action evaluates user-supplied form da...

CVE-2026-69087

The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, th

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-08-01 发布INFO

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation...

CVE-2025-71403

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-601 #severity:high

漏洞预警2026-08-01 发布INFO

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malici...

CVE-2025-71403

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-08-01 发布INFO

better-auth before 1.1.20 Open Redirect via trustedOrigins Bypass

CVE-2025-71403

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

漏洞预警2026-07-31 发布MEDIUM

GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthenticat...

CVE-2026-53573

GeoNetwork 是一个用于管理空间参考资源的目录应用程序。该漏洞影响 3.12.0 至 4.2.16 以及 4.4.11 之前的版本。在 GeonetworkOAuth2LoginAuthenticationFilter 和 Keyc

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-31 发布INFO

core-geonetwork has an Open Redirect Bypass

CVE-2026-53573

### Summary GeoNetwork's post-login redirect handling can be bypassed to redirect users to an attacker-controlled extern

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #maven #cwe-601 #severity:medium

漏洞预警2026-07-31 发布INFO

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a m...

CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-31 发布INFO

Serendipity < 2.6.1 Open Redirect via exit.php

CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to re

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

漏洞预警2026-07-30 发布INFO

Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to redirect authenticated users to arbitrary external sites ...

CVE-2026-66414

Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-30 发布INFO

Leantime Open Redirect in Login Controller via redirectUrl Parameter

CVE-2026-66414

Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

漏洞预警2026-07-29 发布INFO

Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. ...

CVE-2026-18266

Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability. This vulnerability allows remote attackers to disclose

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-07-28 发布INFO

datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_generator/http.py get_body reuses Authorization, Cookie, and P...

CVE-2026-55403

datamodel-code-generator generates Python data models from schema definitions. Prior to 0.63.0, src/datamodel_code_gener

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-601

安全公告2026-07-28 发布INFO

datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

CVE-2026-55403

### Summary When `datamodel-code-generator` fetches a remote schema and follows an HTTP redirect, it re-sends the origi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-200 #cwe-601 #severity:low