Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,137 results · page 22 of 43
Mar 17, 2022The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.CVE-2022-24073 · Other software · NAVER · reported by cve@navercorp.comHigh 7.1
The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.
- Product
- NAVER Whale browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcve.naver.comcve.naver.com
Mar 14, 2022The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX actCVE-2022-0165 · WordPress plugins & themes · reported by WPScanMedium 6.1
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
- Product
- Page Builder KingComposer
- Affected
- up to 2.9.6
- What to do
- Affects up to 2.9.6. Update Page Builder KingComposer to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Mar 11, 2022The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks.CVE-2021-32478 · Other software · Moodle · reported by Red HatMedium 6.1
The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.
- Product
- Moodle
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 7, 2022LoginPress | Custom Login Page Customizer: Does not escape the redirect-page parameter before outputting it back in an attributeCVE-2022-0347 · WordPress plugins & themes · reported by WPScanMedium 6.1
The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
- Product
- LoginPress | Custom Login Page Customizer
- Fixed in
- 1.5.12
- What to do
- Update LoginPress | Custom Login Page Customizer to 1.5.12 or newer.
Mar 6, 2022Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.CVE-2022-0697 · Other software · archivy · reported by security@huntr.devMedium 6.1
Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.
- Product
- archivy/archivy
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 6, 2022Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.CVE-2022-0868 · Other software · medialize · reported by security@huntr.devMedium 6.1
Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.
- Product
- medialize/uri.js
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 6, 2022Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.CVE-2022-0869 · Other software · nitely · reported by security@huntr.devMedium 6.1
Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.
- Product
- nitely/spirit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 4, 2022DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.CVE-2021-46379 · Other software · Dlink · reported by MITREMedium 6.1
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.
- Product
- Dir-850l Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comdrive.google.com
Feb 25, 2022The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.CVE-2021-23495 · Other software · Karma Project · reported by report@snyk.ioMedium 5.4
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
- Product
- Karma
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 25, 2022In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.CVE-2022-24330 · Other software · Jetbrains · reported by MITREMedium 6.1
In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.
- Product
- Teamcity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.jetbrains.comblog.jetbrains.com
Feb 24, 2022A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5.CVE-2021-29217 · Other software · HPE · reported by security-alert@hpe.comMedium 6.1
A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
- Product
- Oneview Global Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Feb 24, 2022A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c.CVE-2021-3700 · Other software · Spice-space · reported by Red HatMedium 6.4
A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.
- Product
- Usbredir
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comgitlab.freedesktop.org
Feb 21, 2022Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.CVE-2022-0692 · Other software · rudloff · reported by security@huntr.devMedium 6.1
Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.
- Product
- rudloff/alltube
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 18, 2022A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quCVE-2021-20322 · Computers, phones & browsers · Linux · reported by Red HatHigh 7.4
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
- Product
- Linux Kernel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comgit.kernel.org
Feb 18, 2022Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects.CVE-2022-0451 · Computers, phones & browsers · Google LLC · reported by cve-coordination@google.comMedium 6.5
Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirection logic. If a request is sent to example.com with authorization header and it redirects to an attackers site, they might not expect attacker site to receive authorization header. We recommend updating the Dart SDK to version 2.16.0 or beyond.
- Product
- Dart SDK
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddart-review.googlesource.comgithub.com
Feb 15, 2022Open Redirect in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0597 · Other software · microweber · reported by security@huntr.devMedium 6.1
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
- Product
- microweber/microweber
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 14, 2022WordPress Newsletter: Does not validate the to parameter before redirecting the user to its given valueCVE-2021-25033 · WordPress plugins & themes · reported by WPScanMedium 6.1
The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue
- Product
- WordPress Newsletter
- Fixed in
- 1.6.5
- What to do
- Update WordPress Newsletter to 1.6.5 or newer.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwpscan.com
Feb 11, 2022In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their cCVE-2022-24968 · Other software · Mellium · reported by MITREMedium 5.9
In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification.
- Product
- Xmpp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 11, 2022An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRFCVE-2021-46366 · Other software · Magnolia-cms · reported by MITREHigh 8.8
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
- Product
- Magnolia CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.magnolia-cms.comgithub.com
Feb 11, 2022In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy.CVE-2021-39668 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-193445603
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Feb 11, 2022Open Redirect in Packagist microweber/microweber prior to 1.2.11.CVE-2022-0560 · Other software · microweber · reported by security@huntr.devMedium 6.1
Open Redirect in Packagist microweber/microweber prior to 1.2.11.
- Product
- microweber/microweber
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 9, 2022Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.CVE-2022-0536 · Other software · follow-redirects · reported by security@huntr.devLow 2.6
Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.
- Product
- follow-redirects/follow-redirects
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.CVE-2021-45328 · Other software · Gitea · reported by MITREMedium 6.1
Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.
- Product
- Gitea
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.gitea.iogithub.com
Feb 6, 2022In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.CVE-2022-23184 · Other software · Octopus Deploy · reported by security@octopus.comMedium 6.1
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
- Product
- Octopus Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordadvisories.octopus.comadvisories.octopus.com
Feb 4, 2022Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect users to malicious sites using the "referuCVE-2021-45408 · Other software · Seeddms · reported by MITREMedium 6.1
Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect users to malicious sites using the "referuri" parameter.
- Product
- Seeddms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunil-singh.notion.sitesunil-singh.notion.site
Jan 29, 2022Adenza AxiomSL ControllerView through 10.8.1 allows redirection for SSO login URLs.CVE-2022-22919 · Other software · Adenza · reported by MITREMedium 6.1
Adenza AxiomSL ControllerView through 10.8.1 allows redirection for SSO login URLs.
- Product
- Axiomsl Controllerview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 24, 2022Event Tickets: Does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given valueCVE-2021-25028 · WordPress plugins & themes · reported by WPScanMedium 6.1
The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue
- Product
- Event Tickets
- Fixed in
- 5.2.2
- What to do
- Update Event Tickets to 5.2.2 or newer.
Jan 21, 2022The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirCVE-2021-23664 · Other software · Isomorphic-git · reported by report@snyk.ioHigh 8.6
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.
- Product
- Cors-proxy
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 17, 2022When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing.CVE-2021-42357 · Websites & servers · Apache Software Foundation · reported by security@apache.orgMedium 6.1
When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.
- Product
- Apache Knox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comlists.apache.org
Jan 13, 2022An open redirect vulnerability has been reported to affect QNAP device running QcalAgent.CVE-2021-38678 · Network & remote access · QNAP Systems Inc. · reported by security@qnapsecurity.com.twMedium 6.1
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later
- Product
- QcalAgent
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 10, 2022follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized ActorCVE-2022-0155 · Other software · follow-redirects · reported by security@huntr.devMedium 6.5
follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
- Product
- follow-redirects/follow-redirects
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comgithub.com
Jan 10, 2022A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allCVE-2021-44528 · Other software · Rubyonrails · reported by support@hackerone.comMedium 6.1
A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
- Product
- Rails
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsecurity.netapp.com
Jan 6, 2022forge is vulnerable to URL Redirection to Untrusted SiteCVE-2022-0122 · Other software · digitalbazaar · reported by security@huntr.devMedium 6.1
forge is vulnerable to URL Redirection to Untrusted Site
- Product
- digitalbazaar/forge
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 30, 2021Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard.CVE-2021-20150 · Other software · Trendnet · reported by vulnreport@tenable.comMedium 5.3
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page.
- Product
- Tew-827dru Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtenable.comtenable.com
Dec 24, 2021Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earCVE-2021-20875 · Other software · Japan Total System Co.,Ltd. · reported by vultures@jpcert.or.jpMedium 6.1
Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks by having a user to access a specially crafted URL.
- Product
- GroupSession Free edition, GroupSession byCloud, GroupSession ZION
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 20, 2021MSEdgeRedirect is a tool to redirect news, search, widgets, weather, and more to a user's default browser.CVE-2021-43844 · Other software · rcmaehl · reported by GitHubHigh 8.8
MSEdgeRedirect is a tool to redirect news, search, widgets, weather, and more to a user's default browser. MSEdgeRedirect versions before 0.5.0.1 are vulnerable to Remote Code Execution via specifically crafted URLs. This vulnerability requires user interaction and the acceptance of a prompt. With how MSEdgeRedirect is coded, parameters are impossible to pass to any launched file. However, there are two possible scenarios in which an attacker can do more than a minor annoyance. In Scenario 1 (confirmed), a user visits an attacker controlled webpage; the user is prompted with, and downloads, an executable payload; the user is prompted with, and accepts, the aforementioned crafted URL prompt; and RCE executes the payload the user previously downloaded, if the download path is successfully guessed. In Scenario 2 (not yet confirmed), a user visits an attacked controlled webpage; the user is prompted with, and accepts, the aforementioned crafted URL prompt; and a payload on a remote, attacker controlled, SMB server is executed. The issue was found in the _DecodeAndRun() function, in which I incorrectly assumed _WinAPI_UrlIs() would only accept web resources. Unfortunately, file:/// pass
- Product
- MSEdgeRedirect
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 17, 2021TCMAN GIM is affected by an open redirect vulnerability.CVE-2021-40852 · Other software · TCMAN · reported by cve-coordination@incibe.esMedium 6.1
TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordincibe-cert.esincibe-cert.es
Dec 15, 2021An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.CVE-2020-18985 · Email & office · Synacor · reported by MITREMedium 6.1
An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.
- Product
- Zimbra Collaboration Suite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 15, 2021In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy.CVE-2021-1024 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191283525
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Dec 14, 2021.htaccess Redirect: Reflected Cross-Site ScriptingCVE-2021-38361 · WordPress plugins & themes · reported by WordfenceMedium 6.1
The .htaccess Redirect WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the link parameter found in the ~/htaccess-redirect.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.3.1.
- Product
- .htaccess Redirect
- Affected
- up to 0.3.1
- What to do
- Affects up to 0.3.1. Update .htaccess Redirect to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Dec 10, 2021openwhyd is vulnerable to URL Redirection to Untrusted SiteCVE-2021-3829 · Other software · openwhyd · reported by security@huntr.devMedium 6.1
openwhyd is vulnerable to URL Redirection to Untrusted Site
- Product
- openwhyd/openwhyd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2021The 'Copy Image Link' context menu action would copy the final image URL after redirects.CVE-2021-43532 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgMedium 6.1
The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the final image URL could be one that contained an authentication token used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the page would be able to steal the authentication tokens. This was fixed by making the action return the original URL, before any redirects. This vulnerability affects Firefox < 94.
- Product
- Firefox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.mozilla.orgmozilla.org
Dec 8, 2021When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked.CVE-2021-43531 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgMedium 4.3
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
- Product
- Firefox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.mozilla.orgmozilla.org
Dec 8, 2021Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action.CVE-2021-25526 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comMedium 4
Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action.
- Product
- Samsung Blockchain Wallet
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.samsungmobile.comsecurity.samsungmobile.com
Dec 8, 2021An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.CVE-2021-25514 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comLow 3.3
An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.
- Product
- Samsung Mobile Devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.samsungmobile.comsecurity.samsungmobile.com
Dec 8, 2021A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attCVE-2021-43064 · Network & remote access · Fortinet · reported by psirt@fortinet.comMedium 4.3
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via redirection handlers.
- Product
- Fortinet FortiWeb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfortiguard.comfortiguard.com
Dec 8, 2021A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy CVE-2021-36191 · Network & remote access · Fortinet · reported by psirt@fortinet.comMedium 4.1
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers
- Product
- Fortinet FortiWeb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfortiguard.comfortiguard.com
Dec 7, 2021Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.CVE-2020-19611 · Other software · Racktables Project · reported by MITREMedium 6.1
Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.
- Product
- Racktables
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2021LoginWP (Formerly Peter's Login Redirect): Does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin pageCVE-2021-24939 · WordPress plugins & themes · reported by WPScanMedium 6.1
The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue
- Product
- LoginWP (Formerly Peter's Login Redirect)
- Fixed in
- 3.0.0.5
- What to do
- Update LoginWP (Formerly Peter's Login Redirect) to 3.0.0.5 or newer.
Dec 3, 2021showdoc is vulnerable to URL Redirection to Untrusted SiteCVE-2021-4000 · Other software · star7th · reported by security@huntr.devMedium 6.1
showdoc is vulnerable to URL Redirection to Untrusted Site
- Product
- star7th/showdoc
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.