共收录 381 条相关情报。
← 返回所有主题CVE-2026-48000
Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature
CVE-2026-48784
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.4
CVE-2026-45065
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.4
CVE-2026-44745
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurati
CVE-2026-44745
SAP Approuter 在特定配置下，对 OAuth2 登录流程中的传入请求头验证不充分，导致未经身份验证的远程攻击者可构造恶意链接。受害者点击该链接后，攻击者可获得未授权访问，从而对应用程序的机密性和完整性造成高影响，但不影响可用性。
CVE-2026-55806
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This is
CVE-2026-55806
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Drupal core allows Content Spoofing. This is
CVE-2026-55461
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stores url()->previous() from the
CVE-2026-54072
## Summary The `/authorize` endpoint accepts any `redirect_uri` without validating it against `AllowedOrigins`. When `r
CVE-2026-59180
Apprise is an open source library which allows you to send a notification to almost all of the most popular notification
CVE-2026-55252
### Summary The restrictions on redirect URLs in `openrun` can be bypassed by attackers, leading to open redirect attack
CVE-2026-55590
CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior
CVE-2026-55590
CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior
CVE-2026-31982
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of
CVE-2026-59806
Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to re
CVE-2026-49456
## Summary The `unstable_redirect()` helper exported from `waku/router/server` (`packages/waku/src/router/define-router
CVE-2026-59806
Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to re
CVE-2026-59806
Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attackers to re
CVE-2026-55431
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7,
CVE-2026-55431
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7,