Endpoint UnvalidatedRedirect
Unvalidated redirects occur when an application redirects a user to a destination URL specified by a user supplied parameter that is not validated. Such vulnerabilities can be used to facilitate phishing attacks.
IndexedPublic repositoryHighMedium confidenceVerifiedLGPL-3.0-onlykotlin
greprules fetch gitlab-sast-rules-lgpl-kotlin-endpoint-rule-unvalidatedredirect --engine opengrepDescription
Unvalidated redirects occur when an application redirects a user to a destination URL specified by a user supplied parameter that is not validated. Such vulnerabilities can be used to facilitate phishing attacks.
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.