CWE-601 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-601 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2021-38000Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638…4.9%보통6.1● 실제 악용이 확인됨CVE-2012-0518Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion…4.7%보통4.7CVE-2026-103576Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) …0.8%보통6.5CVE-2026-107020An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 1…0.6%높음7.5CVE-2026-77386Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthen…0.6%보통6.5CVE-2026-81913Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. A…0.5%보통5.3CVE-2026-117553Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows una…0.5%높음7.7CVE-2026-54618Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize…0.5%심각9.4
전체 목록
120건
CVE-2026-116578Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandl…0.5%낮음2.1
CVE-2026-92216A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of…0.4%보통5.3
CVE-2026-94216A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 2026…0.5%낮음2.1
CVE-2026-94214A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717.…0.5%낮음2.1
CVE-2026-111622smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthentica…0.4%높음7.6
CVE-2026-66057Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an …0.4%보통5.1
CVE-2026-94102A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=membe…0.4%낮음2.1
CVE-2026-101907Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter …0.4%높음7.0
CVE-2026-83500Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to by…0.4%보통6.1
CVE-2023-24034An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to …0.4%낮음3.1
CVE-2026-7527The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in a…0.4%보통4.7
CVE-2026-101152Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker …0.4%높음7.6
CVE-2026-80327An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGatew…0.4%보통5.1
CVE-2026-83646Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an …0.4%보통4.8
CVE-2026-88880Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, al…0.4%심각9.2
CVE-2026-101090Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional…0.4%심각9.3
CVE-2026-93869Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates r…0.4%보통5.3
CVE-2026-112034A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function ICo…0.3%낮음2.1
CVE-2026-86351Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path b…0.3%보통5.1
CVE-2026-82402Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can provide a…0.3%보통5.3
CVE-2026-92141Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allow…0.3%보통4.3
CVE-2026-115196An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a…0.3%보통5.4
CVE-2026-115537A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a…0.3%낮음2.1
CVE-2026-81509nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple …0.3%보통6.1
CVE-2026-96892A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the compo…0.3%낮음2.1
CVE-2026-95813e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorCompon…0.3%보통5.3
CVE-2026-112251A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of t…0.3%낮음2.1
CVE-2026-55252OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or …0.3%보통5.1
CVE-2026-88882Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images an…0.3%심각9.2
CVE-2026-88881Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` …0.3%심각9.2
CVE-2026-88887Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate fol…0.3%심각9.2
CVE-2026-49456Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstable_redirect() helper exported fr…0.3%낮음3.1
CVE-2026-101151Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL…0.3%보통5.3
CVE-2026-73191URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Syncope. When the Syncope SRA is c…0.3%보통6.1
CVE-2026-14452Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2…0.3%높음8.6
CVE-2026-89307The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker t…0.3%보통5.1
CVE-2026-87937URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS…0.3%보통6.5
CVE-2026-13277IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect a…0.3%보통4.7
CVE-2026-12985Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7 Mattermost failed to validate Dynamic…0.3%보통6.8
CVE-2026-65388A remote attacker who controls a container registry may be able to direct a client's token request to a host o…0.3%높음7.5
CVE-2026-54072Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, t…0.3%심각9.3
CVE-2026-107718AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3…0.3%보통6.1
CVE-2024-58389HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows rem…0.3%보통5.1
CVE-2026-54724Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted …0.3%보통6.1
CVE-2024-58398Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerabil…0.3%보통5.3
CVE-2026-93871Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing au…0.3%보통5.1
CVE-2026-86823The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after…0.3%보통5.3
CVE-2026-55840Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/…0.3%보통5.4
CVE-2026-8323URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. …0.3%심각9.3
CVE-2026-112040A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affec…0.3%낮음2.1
CVE-2026-105128LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect us…0.3%보통5.3
CVE-2026-115360OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects u…0.2%보통5.3
CVE-2026-53989Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows una…0.3%보통5.3
CVE-2026-54915Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the unauthenti…0.3%보통5.4
CVE-2026-113384A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5…0.3%낮음2.1
CVE-2026-97325A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vuln…0.3%낮음2.1
CVE-2026-85676Dub contains an open redirect vulnerability in the redir_url query parameter that is accepted on every short l…0.2%보통5.3
CVE-2026-111031The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in…0.2%보통4.7
CVE-2026-109160A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfi…0.3%낮음2.1
CVE-2026-96773A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function…0.3%낮음2.1
CVE-2026-77609Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within t…0.2%보통6.1
CVE-2026-97165Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “r…0.2%보통5.3
CVE-2026-118425A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access manage…0.2%보통6.8
CVE-2026-90453A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same requ…0.2%보통5.1
CVE-2026-7767GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19…0.2%보통5.8
CVE-2026-15412IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a rem…0.2%보통6.5
CVE-2026-107369The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then stores thi…0.2%보통6.1
CVE-2026-87945URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows…0.2%보통5.4
CVE-2026-105846Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 an…0.2%보통6.1
CVE-2026-81423The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it…0.2%보통4.3
CVE-2026-72528"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When acce…0.2%보통5.1
CVE-2024-12141The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious paylo…0.2%보통4.3
CVE-2026-114060SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:e…0.2%낮음2.1
CVE-2024-2372The affected components accept user-supplied input for constructing redirection URLs without enforcing expecte…0.2%보통5.4
CVE-2026-86205h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack() utility that fails…0.2%보통5.3
CVE-2026-118656Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redire…0.2%보통6.1
CVE-2026-86756Snipe-IT 8.5.0 through 8.6.3 contains an open redirect vulnerability in its SAML assertion-consumer endpoint (…0.2%보통5.3
CVE-2026-102090Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was …0.2%보통4.3
CVE-2026-111385Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds …0.2%보통6.3
CVE-2026-79650Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful …0.2%미평가
CVE-2026-78377URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting,…0.2%보통6.1
CVE-2026-118658Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X…0.2%보통4.7
CVE-2026-91772Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to …0.2%보통5.3
CVE-2026-106322Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging soci…0.2%미평가
CVE-2026-83589A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter…0.2%보통6.1
CVE-2026-86256wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerability in the trainer_login view…0.2%보통5.1
CVE-2026-100523Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes the redirect …0.2%보통5.1
CVE-2026-114614Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.comm…0.2%낮음2.6
CVE-2026-80072The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-l…0.2%보통4.7
CVE-2026-81741The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict th…0.2%보통4.7
CVE-2026-88791The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination wh…0.2%낮음3.4
CVE-2024-4989The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be contro…0.2%보통5.4
CVE-2026-111931Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows at…0.2%보통5.3
CVE-2026-39600URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-…0.2%보통4.7
CVE-2026-76720A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.0.2%보통4.3
CVE-2026-92432The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redir…0.2%보통4.3
CVE-2026-108261Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin …0.2%심각9.3
CVE-2026-93649In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up …0.2%높음7.5
CVE-2026-92116OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. U…0.1%미평가
CVE-2026-102778Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gall…0.2%보통5.3
CVE-2026-53728Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the exter…0.1%높음7.1
CVE-2026-89122SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthe…0.1%보통6.1
CVE-2026-109937The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to th…0.1%보통5.4
CVE-2026-84389A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1,…0.1%낮음3.1
CVE-2026-103048URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Coll…0.1%미평가
CVE-2026-97318The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveawa…0.1%보통6.1
CVE-2026-73599Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to…0.1%보통5.4
CVE-2026-18505IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHe…0.1%보통5.4
CVE-2026-80444URL redirection to untrusted site ('open redirect') vulnerability in Abis Technology Ltd. Co. AVESİS allows In…0.1%보통5.4
CVE-2026-120638CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application v…미평가
CVE-2026-120636CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in…미평가
CVE-2026-120633CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and …미평가
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.