Common Weakness Enumeration

    CWE Definition / CWE-601

    CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

    The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

    Published:7 May 2007
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-610: Externally Controlled Reference to a Resource in Another Sphere

    CWE-610: Externally Controlled Reference to a Resource in Another Sphere