CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Apprise forwards configured auth headers across cross-origin HTTP redirects

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

AdonisJS: Unencoded route parameters can produce open redirects

Payload: Untrusted redirect URL parameter exploit

chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

Duplicate Advisory: chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF

Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`

Semantic MediaWiki has an open redirect in Special:URIResolver

Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty

React Router: Open redirect leading to XSS

unstructured: Server-Side Request Forgery in the URL-based partitioning

SAP Approuter has an Open Redirect vulnerability

SAP Approuter has an Information Disclosure vulnerability

Snipe-IT has an Open Redirect After User Edit

Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter

Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL

Medplum: Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage

CakePHP Authentication: Open redirect weakness via backslash bypass

Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"

Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header