Home/CWE/URL Redirection to Untrusted Site ('Open Redirect')
Weakness

URL Redirection to Untrusted Site ('Open Redirect')

CWE-601 · Base · Draft

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-610 · Externally Controlled Reference to a Resource in Another Sphere
◆

Attack Patterns (CAPEC)

1
How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-178Cross-Site Flashing
⚠

CVEs With This Weakness

1,742
A sample of the 1,742 CVEs tagged with this weakness.
CVECVE-2026-6795
CVECVE-2026-6203
CVECVE-2026-5467
CVECVE-2026-4799
CVECVE-2026-45448
CVECVE-2026-45055
CVECVE-2026-45037
CVECVE-2026-44520
CVECVE-2026-44503
CVECVE-2026-44437
CVECVE-2026-44427
CVECVE-2026-44372
◉

Nuclei Scanner Templates

30
Open-source Nuclei templates that detect this weakness class - an actionable scan-for-it pivot. Licensed under the ProjectDiscovery / Nuclei terms.
criticalLabstack Echo 4.8.0 - Open Redirect
highGrafana - XSS / Open Redirect / SSRF via Client Path Traversal
highWPMobile.App <= 11.56 - Open Redirect
mediumOpen Redirect - Detect
mediumOpen Redirect - Detection
mediumLimeSurvey - Open Redirect via editorLink
mediumOtobo - Open Redirect
mediumThinkific - Open Redirect
mediumMozilla Pollbot - Open Redirect
mediumBitrix Site Management Russia 2.0 - Open Redirect
mediumIceWarp - Open Redirect
mediumNext.js <1.2.3 - Open Redirect
mediumASP-Nuke - Open Redirect
mediumOdoo CMS - Open Redirect
mediumHTTPBin - Open Redirect
mediumWordPress Newsletter Manager < 1.5 - Unauthenticated Open Redirect
mediumWordPress All-in-One Security <=4.4.1 - Open Redirect
mediumWordPress Ultimate Member <2.1.7 - Open Redirect
mediumWordPress eCommerce Music Store <=1.0.14 - Open Redirect
mediumWordPress Eatery 2.2 - Open Redirect
mediumGTranslate < 2.8.11 - Open Redirect
mediumWordPress Weekender Newspaper 9.0 - Open Redirect
mediumWordPress WPtouch 3.x - Open Redirect
mediumWordPress Age Gate <2.13.5 - Open Redirect
mediumWordPress Grimag <1.1.1 - Open Redirection
mediumWordPress Attitude 1.1.1 - Open Redirect
mediumNetsweeper 4.0.9 - Open Redirect
mediumDedeCMS - Open Redirect
mediumJIRA in HTTPS mode - Open Redirect
mediumGitea < 1.21.0 - Open Redirect
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin