Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register...
CVE-2026-12049
Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register endpoints honoured the user
#cwe-601
共收录 381 条相关情报。
← 返回所有主题Open redirect in pgAdmin 4's multi-factor authentication flow. The MFA validate and register endpoints honoured the user-supplied 'next' query/form parameter without confirming ...
CVE-2026-12049
pgAdmin 4 的多因素认证（MFA）流程中存在开放重定向漏洞。漏洞位于 MFA 验证和注册端点，这些端点直接使用用户提供的 'next' 查询参数或表单参数进行重定向，而未验证目标是否属于 pgAdmin 自身。因此，已认证用户若点击
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site S...
CVE-2026-55237
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent
CakePHP Authentication: Open redirect weakness via backslash bypass
CVE-2026-55590
### Impact The `getLoginRedirect()` method contains a weakness to backslash bypasses allowing redirect targets with atta
A vulnerability in the browser-based version of Cisco Webex App could have allowed an...
CVE-2026-20178
A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker t
Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An...
CVE-2025-32748
Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An unauthenticated attack
Gitea: Open Redirect via redirect_to
CVE-2026-25779
### Details Despite the validation within `urlIsRelative` in `modules/httplib/url.go`, an open redirect is still possib
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.2.0, the getRedirectURL function in oauth2...
CVE-2026-53523
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to be
TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities
CVE-2026-47347
### Problem Applications that use `GeneralUtility::sanitizeLocalUrl` to allow only local URLs are vulnerable to open red
The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:...
CVE-2026-50089
The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redire
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication...
CVE-2026-41706
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser
Spring Security Authorization Server's authorization endpoint performs insufficient validation of...
CVE-2026-41008
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parame
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their inte...
CVE-2026-41706
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization requ...
CVE-2026-41008
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parame
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redirect) vulnerability that could lead to account takeover. An...
CVE-2026-47991
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect (Open Redire
A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website.
CVE-2026-28301
A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended websit
Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used after it has passed the aforementioned...
CVE-2026-47347
Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks
A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified allows an attacker to craft a link resulting in a...
CVE-2026-41844
A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly sp
A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of the file jeecg-module-system/jeecg-system-biz/src/main/java...
CVE-2026-11502
A weakness has been identified in JeecgBoot up to 3.9.2. Impacted is the function HttpServletResponse.sendRedirect of th
A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function...
CVE-2026-11477
A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file h