CWE-601: Open Redirect vulnerabilities

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14), Teamcenter V2312 (All versions < V2312.0010), Teamcenter V2406 (All versions < V2406.0008), Teamcenter V2412 (All versions < V2412.0004). The SSO login service of affected applications accepts user-controlled input that could specify a link to an external site. This could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.

The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.

CVE-2024-50345 is an open redirect vulnerability in the symfony/http-foundation module of the Symfony PHP framework. The Request class does not parse URIs with special characters the same way browsers do, allowing attackers to bypass validators and redirect users to arbitrary domains. This issue has been fixed in symfony versions 5.4.46, 6.4.14, and 7.1.7. Users should upgrade to these versions or later to mitigate the vulnerability. No workarounds are known.

CVE-2024-43536 is an open redirect vulnerability (CWE-601) affecting Microsoft Windows 10 Version 1809 and later builds up to specific patched versions. It involves the Windows Mobile Broadband Driver and could allow an attacker to redirect users to untrusted sites. The vulnerability has a CVSS score of 6.8, indicating a medium severity level. Official fixes have been released by Microsoft for all affected versions.

CVE-2024-43543 is a vulnerability in Microsoft Windows 10 Version 1809 and later versions that allows URL redirection to untrusted sites, classified as an Open Redirect (CWE-601). It affects multiple Windows 10 builds prior to specific fixed versions. The vulnerability has a CVSS score of 6.8, indicating a medium severity level. It was officially fixed by Microsoft in updates released for the affected versions. No known exploits in the wild have been reported.

CVE-2024-8883 is a vulnerability in Keycloak services where improper validation of redirect URIs allows an attacker to redirect users to arbitrary URLs if 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1. This can expose sensitive information such as authorization codes, potentially leading to session hijacking. The vulnerability has a CVSS score of 6.1 (medium severity). Red Hat has released security updates for JBoss Enterprise Application Platform 8.0 that address this issue.

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issue affects Easy PayPal Buy Now Button: from n/a through 1.9.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Kodezen Limited Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields. This issue affects SSO (Single Sign On): from 1.0 before 1.1.

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting (XSS), Server-Side Request Forgery (SSRF), amongst others. This issue is due to improper validation of user-supplied input in the handling of URLs. Attackers can exploit this vulnerability by crafting a malicious URL that, when processed by the application, redirects the user to an attacker-controlled web page.

The Export WP Page to Static HTML/CSS plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.2.2. This is due to insufficient validation on the redirect url supplied via the rc_exported_zip_file parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 4.0.30. This is due to insufficient validation on the redirect url supplied via the redirect_to parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Deepen Bajracharya Video Conferencing with Zoom.This issue affects Video Conferencing with Zoom: from n/a through 4.4.4.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV Flowplayer Video Player: from n/a through 7.5.44.7212.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Freshworks Freshdesk (official).This issue affects Freshdesk (official): from n/a through 2.3.6.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP OAuth Server OAuth Server.This issue affects OAuth Server: from n/a through 4.3.3.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Appcheap.Io App Builder.This issue affects App Builder: from n/a through 3.8.7.