On this page
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Weakness Summary
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
- Canonical source: MITRE CWE-601 (opens in a new tab)
- Published Atomicorp CVE observations: 123
- Distinct affected products in those observations: 107
- Active Atomicorp rules associated with this weakness: 46
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2026-53662 | immich: One-click account takeover via XSS in login page continue redirect | immich | Protected by Atomicorp rules | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 341099 , 341256 , 341266 , 342259 |
| CVE-2026-101090 | Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri | nezha | Protected by Atomicorp rules | 344365 |
| CVE-2026-55237 | AutoGPT SignUp Page has DOM-Based XSS and Open Redirect | AutoGPT | Protected by Atomicorp rules | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-79662 | Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass | Ech0 | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-75833 | Grav API Plugin Open Redirect via Backslash Bypass | grav | Protected by Atomicorp rules | 344365 |
| CVE-2026-34931 | hoppscotch: Improper loopback redirect_uri validation in device-login flow | hoppscotch | Protected by Atomicorp rules | 344365 |
| CVE-2026-81029 | OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI | OpenMetadata | Protected by Atomicorp rules | 344365 |
| CVE-2026-81036 | Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri | stalwart | Protected by Atomicorp rules | 344365 |
| CVE-2025-62716 | Plane Vulnerable to Cross-Site Scripting via Open Redirect in ?next_path Parameter | plane | Protected by Atomicorp rules | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 |
| CVE-2026-111622 | smart-sso through 2.1.1 OAuth2 Authorization Code Theft via Unvalidated redirectUri | smart-sso | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-63094 | SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft | signoz | Protected by Atomicorp rules | 344365 |
| CVE-2026-53728 | Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage | medplum | Protected by Atomicorp rules | 340162 , 340163 , 344365 |
| CVE-2026-79786 | Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration | coroot | Protected by Atomicorp rules | 344365 |
| CVE-2026-53523 | Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection | nezha | Protected by Atomicorp rules | 344365 |
| CVE-2019-3778 | Spring Security OAuth - Open Redirector | spring security oauth | Protected by Atomicorp rules | 390703 , 390727 , 392301 , 392648 |
| CVE-2026-77386 | Kyoo: OIDC login token can be redirected to an attacker-controlled URL | Kyoo | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2025-61669 | jupyter_server next parameter open redirect can redirect users to external domains | jupyter server | Protected by Atomicorp rules | 344365 |
| CVE-2026-111385 | Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools | nezha | Protected by Atomicorp rules | 390719 |
| CVE-2013-2621 | Telaen => v1.3.1 - Open Redirect | telaen | Protected by Atomicorp rules | 320007 |
| CVE-2015-4668 | Xceedium Xsuite - Multiple Vulnerabilities | xsuite | Protected by Atomicorp rules | 320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2017-1000163 | Phoenix Framework - Open Redirect | phoenix | Protected by Atomicorp rules | 344365 |
| CVE-2018-12300 | Seagate NAS OS 4.3.15.1 - Open Redirect | nas os | Protected by Atomicorp rules | 340163 |
| CVE-2019-1943 | CISCO Small Business 200 / 300 / 500 Switches - Multiple Vulnerabilities | sg200-50 firmware | Protected by Atomicorp rules | 390727 , 392301 , 392648 |
| CVE-2020-13121 | Submitty <= 20.04.01 - Open Redirect | submitty | Protected by Atomicorp rules | 340162 , 340163 |
| CVE-2020-18268 | Z-Blog <=1.5.2 - Open Redirect | z-blogphp | Protected by Atomicorp rules | 390500 , 390501 |
| CVE-2021-24165 | WordPress Ninja Forms <3.4.34 - Open Redirect | ninja forms | Detected by Atomicorp rules | 377360 |
| CVE-2021-24210 | WordPress PhastPress <1.111 - Open Redirect | phastpress | Protected by Atomicorp rules | 340162 , 340163 |
| CVE-2021-24838 | WordPress AnyComment <0.3.5 - Open Redirect | anycomment | Protected by Atomicorp rules | 390145 |
| CVE-2021-25074 | WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect | webp converter for media | Protected by Atomicorp rules | 340162 , 340163 |
| CVE-2021-32478 | Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect | moodle | Protected by Atomicorp rules | 346755 , 350148 |
| CVE-2024-0250 | Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect | analytics insights | Protected by Atomicorp rules | 340162 , 340163 |
| CVE-2024-25608 | Liferay Portal - Open Redirect | digital experience platform,liferay portal | Detected by Atomicorp rules | 398005 |
| CVE-2024-3032 | WordPress Themify Builder < 7.5.8 - Open Redirect | builder | Detected by Atomicorp rules | 377360 |
| CVE-2025-32970 | XWiki WYSIWYG API - Open Redirect | xwiki | Protected by Atomicorp rules | 340162 , 340163 |
| CVE-2025-60935 | blitz Open Redirect Vulnerability | blitz | Protected by Atomicorp rules | 344365 |
| CVE-2025-61782 | Open Redirect in OpenCTI's SAML Authentication Flow | opencti | Protected by Atomicorp rules | 340165 , 344365 |
| CVE-2025-62595 | Koa Vulnerable to Open Redirect via Trailing Double-Slash (//) in back Redirect Logic | koa | Protected by Atomicorp rules | 344365 |
| CVE-2025-65954 | SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout | simplesamlphp-module-casserver | Protected by Atomicorp rules | 344365 |
| CVE-2025-67502 | Taguette does not safeguard against Open Redirect | taguette | Protected by Atomicorp rules | 344365 |
| CVE-2026-1296 | Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | Detected by Atomicorp rules | 377360 |
| CVE-2026-25779 | Gitea redirect handling permits open redirects through backslash paths | Gitea Open Source Git Server | Protected by Atomicorp rules | 344365 |
| CVE-2026-32932 | Chamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit | chamilo lms | Protected by Atomicorp rules | 344365 |
| CVE-2026-33213 | Redash: Open redirect vulnerability in post-login redirect handling | redash | Protected by Atomicorp rules | 344365 |
| CVE-2026-34442 | FreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScout | freescout | Protected by Atomicorp rules | 340165 , 344365 |
| CVE-2026-34847 | hoppscotch: Open redirect via /enter?redirect= | hoppscotch | Protected by Atomicorp rules | 344365 |
| CVE-2026-35404 | Open edX Platform has an Open Redirect in Survey Views via Unvalidated redirect_url Parameter | openedx | Protected by Atomicorp rules | 344365 |
| CVE-2026-40295 | Devise: Open Redirect via Unvalidated request.referrer in Timeoutable Session Timeout Handler | devise | Protected by Atomicorp rules | 344365 |
| CVE-2026-42207 | Magento LTS: Open Redirect via Unvalidated uenc Parameter in stockAction() - magento-lts | magento-lts | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-45307 | Speakr: Open redirect in is_safe_url via parser mismatch on next parameter | speakr | Protected by Atomicorp rules | 344365 |
| CVE-2026-46616 | Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers | umbraco cms | Protected by Atomicorp rules | 344365 |
| CVE-2026-50089 | Aqara IAM/SSO Gateway open redirect | iam/sso gateway | Protected by Atomicorp rules | 344365 |
| CVE-2026-55087 | Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (ope | etherpad | Protected by Atomicorp rules | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-81509 | nforwardauth: Unvalidated r parameter allows post-authentication open redirect | nforwardauth | Protected by Atomicorp rules | 344365 |
| CVE-2026-44520 | Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler | docling-graph | Protected by Atomicorp rules | 337109 , 337110 , 340162 , 340163 , 340165 , 344360 , 347009 , 390722 , 398021 , 398022 |
| CVE-2026-75628 | Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_pa | - | Protected by Atomicorp rules | 344365 |
| CVE-2017-14725 | WordPress < 4.8.2 - Authenticated Open Redirect | WordPress | Detected by Atomicorp rules | 377360 |
| CVE-2017-3528 | Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect | applications framework | Protected by Atomicorp rules | 344365 |
| CVE-2019-11269 | Spring Security OAuth - Open Redirector | spring security oauth | Protected by Atomicorp rules | 390703 , 390727 , 392301 , 392648 |
| CVE-2026-115196 | Mautic Security Vulnerability | Mautic | Protected by Atomicorp rules | 340165 , 344365 |
| CVE-2026-18266 | Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability | Dify | Protected by Atomicorp rules | 344365 |
| CVE-2026-45335 | WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage | WeGIA | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-54915 | Tautulli: Open redirect via whitespace bypass in /auth/redirect | Tautulli | Protected by Atomicorp rules | 344365 |
| CVE-2026-55840 | Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass | scoold | Protected by Atomicorp rules | 344365 |
| CVE-2024-58398 | Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter | coder | Protected by Atomicorp rules | 344365 |
| CVE-2025-34504 | KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint | kodexplorer | Protected by Atomicorp rules | 344365 |
| CVE-2025-67713 | Miniflux 2 has an Open Redirect via protocol-relative redirect_url | miniflux | Protected by Atomicorp rules | 344365 |
| CVE-2026-105128 | LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url | laradashboard | Protected by Atomicorp rules | 344365 |
| CVE-2026-12049 | pgAdmin 4: Open redirect in multi-factor authentication flow via unvalidated 'next' parameter | pgadmin 4 | Protected by Atomicorp rules | 340162 , 340163 , 344365 |
| CVE-2026-16336 | trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect | trino | Protected by Atomicorp rules | 340165 , 344365 |
| CVE-2026-3318 | Multiple vulnerabilities in Cradle e-commerce | e-commerce | Protected by Atomicorp rules | 344365 |
| CVE-2026-53989 | Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint | dockhand | Protected by Atomicorp rules | 344365 |
| CVE-2026-58450 | Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter | invoiceninja | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-63768 | cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State | cal.diy | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-80200 | Kimai before 2.53.0 Open Redirect via RelayState | kimai | Protected by Atomicorp rules | 344365 |
| CVE-2026-82274 | Twenty Open Redirect via OAuth Propagator Callback | twenty | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-82402 | Gogs: Open Redirect in /redirect endpoint via backslash bypass in IsSameSite | gogs | Protected by Atomicorp rules | 344365 |
| CVE-2026-85676 | Dub Open Redirect via Unrestricted redir_url Parameter | dub | Protected by Atomicorp rules | 344365 |
| CVE-2026-86205 | h3 before 2.0.1-rc.18 Open Redirect via redirectBack() | h3 | Protected by Atomicorp rules | 344365 |
| CVE-2026-86756 | Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState | snipe-it | Protected by Atomicorp rules | 344365 |
| CVE-2026-91772 | Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter | halo | Protected by Atomicorp rules | 344365 |
| CVE-2025-64115 | Movary unvalidated Referer header allows open redirect and phishing | movary | Protected by Atomicorp rules | 344365 |
| CVE-2025-64116 | Movary vulnerable to an open redirect | movary | Protected by Atomicorp rules | 344365 |
| CVE-2025-64716 | Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode | anubis | Protected by Atomicorp rules | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-100523 | Cotonti through 1.0.0 Open Redirect via message.php redirect parameter | Cotonti | Protected by Atomicorp rules | 344365 |
| CVE-2026-32113 | Discourse: Open redirect via sso_destination_url cookie in enter | discourse | Protected by Atomicorp rules | 344365 |
| CVE-2026-35396 | WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage'] | wegia | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-35398 | WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage'] | wegia | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-35472 | WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage'] | wegia | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-35473 | WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage'] | wegia | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-35474 | WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect'] | wegia | Protected by Atomicorp rules | 344365 |
| CVE-2026-35475 | WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect'] | wegia | Protected by Atomicorp rules | 340165 , 344365 |
| CVE-2026-42350 | Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter | kargo | Protected by Atomicorp rules | 344365 |
| CVE-2026-55185 | Miniflux 2: Open Redirect Bypass | v2 | Protected by Atomicorp rules | 344365 |
| CVE-2026-55252 | OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect | openrun | Protected by Atomicorp rules | 344365 |
| CVE-2026-66414 | Leantime Open Redirect in Login Controller via redirectUrl Parameter | Leantime | Protected by Atomicorp rules | 344365 |
| CVE-2026-73671 | Saurus CMS Unauthenticated Open Redirect via logout url parameter | Saurus CMS Community Edition | Protected by Atomicorp rules | 344365 |
| CVE-2026-86256 | wger before 2.6 Open Redirect via trainer-login next parameter | wger | Protected by Atomicorp rules | 344365 |
| CVE-2026-93871 | Cotonti through 1.0.0 Stored Open Redirect via Page redir: Prefix | Cotonti | Protected by Atomicorp rules | 344365 |
| CVE-2026-51564 | the redirect parameter in Milk admin <=0.9.8 Open Redirect Vulnerability | - | Protected by Atomicorp rules | 344365 |
| CVE-2025-61606 | WeGIA: Open Redirect Vulnerability in control.php endpoint | wegia | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2025-62361 | WeGIA Open Redirect Vulnerability in control.php endpoint nextPage parameter (metodo=listarTodos nomeClasse=Almoxari | wegia | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-41513 | Horilla: Open Redirect via Unvalidated next Parameter in Notification Endpoints | horilla-hr | Protected by Atomicorp rules | 344365 |
| CVE-2026-43924 | FOSSBilling has an open redirect via administrator-configured redirect targets | FOSSBilling | Protected by Atomicorp rules | 344365 |
| CVE-2025-66447 | Chamilo LMS has validation-less redirect on login page | chamilo lms | Protected by Atomicorp rules | 344365 |
| CVE-2026-14236 | Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect | Contact Form 7 | Protected by Atomicorp rules | 344365 |
| CVE-2008-1547 | Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection | exchange server | Protected by Atomicorp rules | 390716 |
| CVE-2026-35411 | Directus is an Open Redirect in Admin 2FA Setup Page | directus | Protected by Atomicorp rules | 344365 |
| CVE-2026-42565 | @workos/authkit-session: Open Redirect via state-derived redirect target | authkit-session | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-48012 | Shopware SSO referer trust leading to an arbitrary redirect target | shopware | Protected by Atomicorp rules | 344365 |
| CVE-2026-53683 | Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html | Red Hat Enterprise Linux 10 | Protected by Atomicorp rules | 340163 , 344365 |
| CVE-2026-55834 | Pocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none | pocket-id | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2025-62379 | Open Redirect in reflex-dev/reflex | reflex | Protected by Atomicorp rules | 344365 |
| CVE-2026-109160 | PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect | PublicCMS | Protected by Atomicorp rules | 344365 |
| CVE-2026-112034 | aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect | iWebShop-5 | Protected by Atomicorp rules | 344365 |
| CVE-2026-113384 | Optimal IdM OptimalCloud social redirect | OptimalCloud | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-11477 | hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect | hsweb-framework | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-14632 | kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect | Ecommerce-CodeIgniter-Bootstrap | Protected by Atomicorp rules | 344365 |
| CVE-2026-67350 | Serendipity < 2.6.1 Open Redirect via exit.php | Serendipity | Protected by Atomicorp rules | 344365 |
| CVE-2026-94102 | WuzhiCMS Login index.php redirect | WuzhiCMS | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
| CVE-2026-94214 | ST Engineering iDirect Evolution/Velocity WebServer Evolution Management Service login.html redirect | iDX | Protected by Atomicorp rules | 340165 , 344365 |
| CVE-2026-96773 | Intelliants Subrion CMS Login Page login.php authorize redirect | Subrion CMS | Protected by Atomicorp rules | 340162 , 340163 , 344365 |
| CVE-2025-15241 | CloudPanel Community Edition HTTP Header users redirect | Community Edition | Protected by Atomicorp rules | 344365 |
| CVE-2026-11502 | JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect | JeecgBoot | Protected by Atomicorp rules | 340162 , 340163 , 340165 , 344365 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 320007 | Active | disruptive (deny) |
| 320464 | Active | disruptive (deny) |
| 320465 | Active | disruptive (deny) |
| 333140 | Active | disruptive (deny) |
| 333141 | Active | disruptive (deny) |
| 337109 | Active | disruptive (deny) |
| 337110 | Active | disruptive (deny) |
| 340023 | Active | disruptive (deny) |
| 340087 | Active | disruptive (deny) |
| 340095 | Active | disruptive (deny) |
| 340099 | Active | disruptive (deny) |
| 340147 | Active | disruptive (deny) |
| 340148 | Active | disruptive (deny) |
| 340162 | Active | disruptive (deny) |
| 340163 | Active | disruptive (deny) |
| 340165 | Active | disruptive (deny) |
| 341099 | Active | disruptive (deny) |
| 341256 | Active | disruptive (deny) |
| 341266 | Active | disruptive (deny) |
| 342259 | Active | disruptive (deny) |
| 344360 | Active | disruptive (deny) |
| 344361 | Active | disruptive (deny) |
| 344363 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 346755 | Active | disruptive (deny) |
| 347009 | Active | disruptive (deny) |
| 347198 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 350148 | Active | disruptive (deny) |
| 377360 | Active | non-disruptive (pass) |
| 390145 | Active | disruptive (deny) |
| 390500 | Active | non-disruptive (not available) |
| 390501 | Active | disruptive (deny) |
| 390703 | Active | disruptive (deny) |
| 390716 | Active | disruptive (deny) |
| 390719 | Active | disruptive (deny) |
| 390722 | Active | disruptive (deny) |
| 390726 | Active | disruptive (deny) |
| 390727 | Active | disruptive (deny) |
| 392301 | Active | disruptive (deny) |
| 392647 | Active | disruptive (deny) |
| 392648 | Active | disruptive (deny) |
| 398005 | Active | non-disruptive (pass) |
| 398021 | Active | disruptive (deny) |
| 398022 | Active | disruptive (deny) |
Related MITRE CAPEC Context
MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims: