Browse / Open Redirect

Open Redirect

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Open Redirect357

Often found together with

• Cross-site Scripting48

Most upvoted Open Redirect reports

AllValidInformativeN/ADuplicate

1. another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account LinkInformativeOpen Redirect · Liberapay
   77 votes
2. Clicking "http://burp" hyperlink on FireFox CA Installation guide redirects to "burp.com" (unclaimed website).InformativeOpen Redirect · low · PortSwigger Web Security
   22 votes
3. REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITYInformativeOpen Redirect · medium · Hiro
   20 votes
4. Incomplete fix for CVE-2022-35406: meta-redirect content-type check bypassable via parameter injectionInformativeOpen Redirect · high · PortSwigger Web Security
   18 votes
5. Dependency repository hijacking aka Repo Jacking from GitHub repo rubygems/bundler-site & rubygems/bundler.github.io + bundler.io docsInformativeOpen Redirect · medium · RubyGems
   12 votes
6. Open Redirect On Your Login PanelInformativeOpen Redirect · low · Eternal
   11 votes
7. Open redirect vulnerability InformativeOpen Redirect · Slack
   11 votes
8. Open Redirect through POST Request in www.redditinc.comInformativeOpen Redirect · medium · Reddit
   10 votes
9. Attacker can smuggle a malicious domain in a URI object.InformativeOpen Redirect · Ruby
   8 votes
10. Bypass for Domain-level redirects (Unvalidated Redirects and Forwar)InformativeOpen Redirect · medium · GitLab
    7 votes
11. Open redirect deceive in hackerone.com via another open redirect link.InformativeOpen Redirect · low · HackerOne
    7 votes
12. Header Injection In app.legalrobot.comInformativeOpen Redirect · Legal Robot
    5 votes
13. target="_blank" Vulnerability Resulting in Critical Phishing VectorInformativeOpen Redirect · Mapbox
    5 votes
14. Ruby:HTTP Header injection in 'net/http'InformativeOpen Redirect · Ruby
    5 votes
15. open redirect to a remote website which can phish usersInformativeOpen Redirect · medium · Concrete CMS
    4 votes
16. Content spoofing on yelp.oneloginInformativeOpen Redirect · low · Yelp
    3 votes
17. owncloud.com open redirectInformativeOpen Redirect · ownCloud
    2 votes
18. Url RedirectionInformativeOpen Redirect · Factlink
    2 votes
19. open redirect in https://slack.comInformativeOpen Redirect · Slack
    2 votes
20. Improper Validation of the Referrer header leading to Open URL RedirectionInformativeOpen Redirect · Coinbase
    2 votes
21. Open Redirect in SlackInformativeOpen Redirect · Slack
    2 votes
22. Unvalidated redirect on user profile websiteInformativeOpen Redirect · Eternal
    1 votes
23. open redirectInformativeOpen Redirect · RelateIQ
    1 votes
24. A10 – Unvalidated Redirects and ForwardsInformativeOpen Redirect · low · Infogram
25. One of yelp.com url is redirecting to domain which is not yet purchasedInformativeOpen Redirect · Yelp
26. prevent %2f spoofed URLs in profile statementInformativeOpen Redirect · Gratipay