security vulnerability_error ai_generated true

Unvalidated redirect to external URL

ID: security/open-redirect

Also available as: JSON · Markdown
85%Fix Rate
88%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active — — —
any active — — —

Root Cause

Application redirects to attacker-controlled URL.

generic

Workarounds

  1. 92% success Validate redirect URL against allowlist of permitted domains
  2. 88% success Use relative URLs for redirects instead of absolute

Dead Ends

Common approaches that don't work:

  1. Check if URL starts with https only 82% fail

    Attacker can use https://evil.com

  2. Blocklist known bad domains 78% fail

    Attacker uses new domain