#cwe-601

共收录 381 条相关情报。

漏洞预警2026-07-28 发布INFO

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC). From 0.4.0 to 2.0.21, a protocol-relative redirect Location returne...

CVE-2026-54603

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC). From 0.4.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-601

安全公告2026-07-28 发布INFO

OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

CVE-2026-54603

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect (OIDC). From 0.4.0

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-200 #cwe-601

漏洞预警2026-07-28 发布INFO

MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-to-HTTPS redirect: Redirect permanent / https://misp.exam...

CVE-2026-67178

MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-t

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-28 发布INFO

Open Redirect in MISP Installer-Generated Apache Configuration

CVE-2026-67178

MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

漏洞预警2026-07-28 发布INFO

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss o...

CVE-2026-14171

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-07-27 发布INFO

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow u...

CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backsl

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

漏洞预警2026-07-27 发布INFO

React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open redirects are vulnerable to XSS. An attacker could c...

CVE-2026-53668

React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-601

漏洞预警2026-07-27 发布INFO

An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.

CVE-2026-51564

An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-27 发布INFO

React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backsl

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

安全公告2026-07-27 发布INFO

React Router: Open redirect can lead to XSS

CVE-2026-53668

React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601 #cwe-79

漏洞预警2026-07-27 发布INFO

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is configured, the @astrojs/node standalone server's static ...

CVE-2026-59730

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-27 发布INFO

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

CVE-2026-59730

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

漏洞预警2026-07-27 发布INFO

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that buil...

CVE-2026-64645

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr

历史摘要 · 未重新核验 · NVD

#cve #cwe-601 #cwe-918

安全公告2026-07-27 发布INFO

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

CVE-2026-64645

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601 #cwe-918

漏洞预警2026-07-27 发布INFO

The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it as the success and cancel redirect targets of a Stripe c...

CVE-2026-14236

The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it

历史摘要 · 未重新核验 · NVD

#cve #cwe-601

安全公告2026-07-23 发布INFO

React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

CVE-2026-53669

This is a follow up to [CVE-2025-68470](https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-601 #severity:medium

安全公告2026-07-23 发布INFO

React Router: Open redirect leading to XSS

CVE-2026-53668

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external locat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-601 #severity:medium

漏洞预警2026-07-22 发布INFO

Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) attack. When Unblu Spark is deployed with com.unblu.identif...

CVE-2026-8152

Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-601

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily...

CVE-2026-62563

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Suppor

历史摘要 · 未重新核验 · NVD

#cve #cwe-285 #cwe-352 #cwe-601

漏洞预警2026-07-21 发布INFO

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. ...

CVE-2026-62517

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).

历史摘要 · 未重新核验 · NVD

#cve #cwe-345 #cwe-601 #cwe-640