Browse CVEs

MEDIUM 6.5 CVE-2022-36087 OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malic… Fedora 3.2.1+ Fix from $1,6002022-09-09 MEDIUM 6.1 CVE-2022-38131 RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious we… Connect No fix yet Fix from $1,6002022-09-06 MEDIUM 6.1 CVE-2021-29864 IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a… Security Identity Manager Mitigation only Fix from $1,6002022-08-30 HIGH 7.2 CVE-2020-26938 In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request … Oauth2 Server after 3.1.1 Fix from $1,9502022-08-29 HIGH 7.4 CVE-2022-27547 HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sen… Hcl Inotes No fix yet Fix from $1,9502022-08-29 HIGH 7.4 CVE-2021-28861 Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI… Python 3.7.14 / 3.8.14+ Fix from $1,9502022-08-23 MEDIUM 6.1 CVE-2021-3639 A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing a… Mod Auth Mellon 0.18.0+ Fix from $1,6002022-08-22 MEDIUM 6.1 CVE-2022-25799 An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and c… Vince 1.50.0+ Fix from $1,6002022-08-16 MEDIUM 6.1 CVE-2022-35953 BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next. Some links in BookWy… Bookwyrm 0.4.5+ Fix from $1,6002022-08-12 MEDIUM 6.1 CVE-2022-28755 The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a… Virtual Desktop Infrastructure 5.10.7 / 5.11.0+ Fix from $1,6002022-08-11 CRITICAL 9.8 CVE-2022-31657 VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect… Identity Manager Patch available Fix from $2,3002022-08-05 MEDIUM 6.1 CVE-2021-23385 This affects all versions of package Flask-Security. When using the get_post_logout_redirect and get_post_login_redirect functions, it is possible to… Flask Security No fix yet Fix from $1,6002022-08-02 MEDIUM 6.1 CVE-2022-31193 DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace… Dspace 6.4+ Fix from $1,6002022-08-01 MEDIUM 6.1 CVE-2022-27509 Unauthenticated redirection to a malicious website Gateway 12.1-55.282 / 12.1-65.15+ Fix from $1,6002022-07-28 MEDIUM 6.1 CVE-2022-30706 Open redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and … Booked 3.3.0+ Fix from $1,6002022-07-26 MEDIUM 6.1 CVE-2022-35652 An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login feature. A remote attacker can cre… Moodle 3.9.15 / 3.11.8+ Fix from $1,6002022-07-25 MEDIUM 6.5 CVE-2022-31151 Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are official headers found in the… Undici 5.7.1+ Fix from $1,6002022-07-21 MEDIUM 6.1 CVE-2022-25803 Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search. Request Tracker 5.0.3+ Fix from $1,6002022-07-14 MEDIUM 5.3 CVE-2022-33712 Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S… Camera 12.0.0.98 / 12.0.01.64+ Fix from $1,6002022-07-12 MEDIUM 6.1 CVE-2022-2250 An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, all… GitLab 14.0.5 / 14.10.5+ Fix from $1,6002022-07-01 MEDIUM 6.1 CVE-2017-20119 A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lan… Server 5.0.2+ Fix from $1,6002022-06-29 MEDIUM 6.1 CVE-2022-2252 Open Redirect in GitHub repository microweber/microweber prior to 1.2.19. Microweber 1.2.19+ Fix from $1,6002022-06-29 MEDIUM 6.1 CVE-2020-26877 ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specif… Oauth 2.0 Server Mitigation only Fix from $1,6002022-06-29 MEDIUM 6.1 CVE-2022-29272 In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing. Nagios Xi after 5.8.5 Fix from $1,6002022-06-29 MEDIUM 6.1 CVE-2022-33146 Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phi… Web2py 2.22.5+ Fix from $1,6002022-06-27 MEDIUM 5.8 CVE-2022-23078 In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page. Habitica 4.233.0+ Fix from $1,6002022-06-22 MEDIUM 6.1 CVE-2022-32444 An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another si… U5cms No fix yet Fix from $1,6002022-06-17 MEDIUM 6.1 CVE-2022-31040 Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contai… Open Forms 1.0.9+ Fix from $1,6002022-06-13 MEDIUM 6.1 CVE-2022-24969 bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check whic… Dubbo 2.6.12 / 2.7.15+ Fix from $1,6002022-06-09 MEDIUM 6.1 CVE-2022-29718 Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect use… Caddy 2.5.0+ Fix from $1,6002022-06-02