CWE-601 on ZAP

Anchor href manipulated from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value assigned to href attribute.

Generated by OWASP PTK IAST Module

Client-side redirect via history.pushState

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL passed to history.pushState, altering client-side navigation.

Generated by OWASP PTK IAST Module

Client-side redirect via location.assign

Mon, 01 Jan 0001 00:00:00 +0000

Tainted destination URL passed to location.assign.

Generated by OWASP PTK IAST Module

Client-side redirect via location.href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted data assigned to location.href, causing a client-side redirect.

Generated by OWASP PTK IAST Module

Client-side redirect via location.replace

Mon, 01 Jan 0001 00:00:00 +0000

Tainted destination URL passed to location.replace.

Generated by OWASP PTK IAST Module

Client-side route change via history.replaceState

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL passed to history.replaceState, altering client-side navigation state.

Generated by OWASP PTK IAST Module

Disallow direct navigation primitives

Mon, 01 Jan 0001 00:00:00 +0000

Detects client-side code that can redirect users to attacker-controlled URLs (open redirects). Includes assignment/calls that control window/location/navigation, attr-based redirects, form actions and jQuery variants.

Generated by OWASP PTK SAST Module

DOM-based Open Redirection (taint flow)

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

External Redirect

Mon, 01 Jan 0001 00:00:00 +0000

URL redirectors represent common functionality employed by web sites to forward an incoming request to an alternate resource. This can be done for a variety of reasons and is often done to allow resources to be moved within the directory structure and to avoid breaking functionality for users that request the resource at its previous location. URL redirectors may also be used to implement load balancing, leveraging abbreviated URLs or recording outgoing links. It is this last implementation which is often used in phishing attacks as described in the example below. URL redirectors do not necessarily represent a direct security vulnerability but can be abused by attackers trying to social engineer victims into believing that they are navigating to a site other than the true destination.

External Redirect

Mon, 01 Jan 0001 00:00:00 +0000

External Redirect

Mon, 01 Jan 0001 00:00:00 +0000

External Redirect

Mon, 01 Jan 0001 00:00:00 +0000

Form action manipulated by tainted route or body input

Mon, 01 Jan 0001 00:00:00 +0000

Tainted route, body, or messaging value changed form action.

Generated by OWASP PTK IAST Module

Form action manipulated from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value assigned to form action.

Generated by OWASP PTK IAST Module

formAction manipulated by tainted route or body input

Mon, 01 Jan 0001 00:00:00 +0000

Tainted route, body, or messaging value changed formAction.

Generated by OWASP PTK IAST Module

location.assign redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to location.assign.

Generated by OWASP PTK IAST Module

location.href redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value navigated location.href.

Generated by OWASP PTK IAST Module

location.replace redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to location.replace.

Generated by OWASP PTK IAST Module

navigation.navigate redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to navigation.navigate.

Generated by OWASP PTK IAST Module

Off-site Redirect

Mon, 01 Jan 0001 00:00:00 +0000

Open redirects are one of the OWASP 2010 Top Ten vulnerabilities. This check looks at user-supplied input in query string parameters and POST data to identify where open redirects might be possible. Open redirects occur when an application allows user-supplied input (e.g. https://nottrusted.com) to control an off-site destination. This is generally a pretty accurate way to find where 301 or 302 redirects could be exploited by spammers or phishing attacks.

Open redirect reflected in body destination

Mon, 01 Jan 0001 00:00:00 +0000

Tests for open redirect by forcing redirect-like parameters to an external, benign domain.

Generated by OWASP PTK DAST Module

Open redirect reflected in form action

Mon, 01 Jan 0001 00:00:00 +0000

Tests for open redirect by forcing redirect-like parameters to an external, benign domain.

Generated by OWASP PTK DAST Module

Open redirect via common param names

Mon, 01 Jan 0001 00:00:00 +0000

Tests for open redirect by forcing redirect-like parameters to an external, benign domain.

Generated by OWASP PTK DAST Module

Open redirect via Navigation API

Mon, 01 Jan 0001 00:00:00 +0000

Tainted destination URL used in navigation.navigate.

Generated by OWASP PTK IAST Module

Open redirect via window.open

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL used in window.open (possible open redirect).

Generated by OWASP PTK IAST Module

Route-controlled history.pushState

Mon, 01 Jan 0001 00:00:00 +0000

Client route state influenced history.pushState.

Generated by OWASP PTK IAST Module

Route-controlled history.replaceState

Mon, 01 Jan 0001 00:00:00 +0000

Client route state influenced history.replaceState.

Generated by OWASP PTK IAST Module

Route-controlled Navigation API transition

Mon, 01 Jan 0001 00:00:00 +0000

Client route state influenced navigation.navigate.

Generated by OWASP PTK IAST Module

Same-origin URL mutations

Mon, 01 Jan 0001 00:00:00 +0000

Generated by OWASP PTK SAST Module

Tainted URL assigned to element.href

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to an element href attribute.

Generated by OWASP PTK IAST Module

Tainted URL assigned to element.src

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to a non-script/iframe/src element src attribute.

Generated by OWASP PTK IAST Module

Tainted URL assigned to form action

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to a form action attribute.

Generated by OWASP PTK IAST Module

Tainted URL assigned to formAction

Mon, 01 Jan 0001 00:00:00 +0000

Tainted URL assigned to a formAction attribute.

Generated by OWASP PTK IAST Module

window.open redirect from tainted source

Mon, 01 Jan 0001 00:00:00 +0000

Tainted value passed to window.open.

Generated by OWASP PTK IAST Module