CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

Description

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Diagram

Diagram illustrating CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Source: MITRE CWE™ — CWE-601

CWE-601: URL Redirection to Untrusted Site ('Open Redirect') — CVE Insight