CVE-2021-3829

openwhyd is vulnerable to URL Redirection to Untrusted Site

• CWE-601

• https://github.com/openwhyd/openwhyd/commit/38707930103dcba49d89d993f56bebd346069640Patch, Third Party Advisory
• https://huntr.dev/bounties/6b8acb0c-8b5d-461e-9b46-b1bfb5a8ccdfExploit, Patch, Third Party Advisory
• https://github.com/openwhyd/openwhyd/commit/38707930103dcba49d89d993f56bebd346069640Patch, Third Party Advisory
• https://huntr.dev/bounties/6b8acb0c-8b5d-461e-9b46-b1bfb5a8ccdfExploit, Patch, Third Party Advisory

Published

Dec 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38269Cross-site scripting (XSS) vulnerability in the Gogo Shell m…5.4
• CVE-2021-3827A flaw was found in keycloak, where the default ECP binding …6.8
• CVE-2021-38278Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a …9.8
• CVE-2021-3828nltk is vulnerable to Inefficient Regular Expression Complex…7.5
• CVE-2021-38283Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows …7.5
• CVE-2021-38289An issue has been discovered in Novastar-VNNOX-iCare Novaica…8.8
• CVE-2021-38290A host header attack vulnerability exists in FUEL CMS 1.5.0 …8.1
• CVE-2021-38291FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df…7.5
• CVE-2021-38294A Command Injection vulnerability exists in the getTopologyH…9.8
• CVE-2021-38295In Apache CouchDB, a malicious user with permission to creat…7.3
• CVE-2021-38296Apache Spark supports end-to-end encryption of RPC connectio…7.5
• CVE-2021-38297Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overf…9.8