CWEweakness

CWE-698 Execution After Redirect (EAR)

Official page ↗
Alternate terms
Redirect Without Exit
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The web application sends a redirect to another location, but instead of exiting, it executes additional code.

Common consequences

• Other, Confidentiality, Integrity, Availability: Alter Execution Logic, Execute Unauthorized Code or Commands — This weakness could affect the control flow of the application and allow execution of untrusted code.

Detection methods

• Black Box: This issue might not be detected if testing is performed using a web browser, because the browser might obey the redirect and move the user to a different page before the application has produced outputs that indicate something is amiss.

Observed examples

• CVE-2013-1402: Execution-after-redirect allows access to application configuration details. • CVE-2009-1936: Chain: library file sends a redirect if it is directly requested but continues to execute, allowing remote file inclusion and path traversal. • CVE-2007-2713: Remote attackers can obtain access to administrator functionality through EAR. • CVE-2007-4932: Remote attackers can obtain access to administrator functionality through EAR. • CVE-2007-5578: Bypass of authentication step through EAR. • CVE-2007-6652: Chain: execution after redirect allows non-administrator to perform static code injection.

Related

Observed example · CVE (6)

  • CVE-2013-1402 DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive… vulnerability
  • CVE-2009-1936 _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows… vulnerability
  • CVE-2007-6652 cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct… vulnerability
  • CVE-2007-5578 Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers… vulnerability
  • CVE-2007-4932 admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are… vulnerability
  • CVE-2007-2713 ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers… vulnerability

Child of · CWE (2)

  • CWE-670 Always-Incorrect Control Flow Implementation weakness
  • CWE-705 Incorrect Control Flow Scoping weakness

Referenced by CVE · weakness (20)

  • CVE-2026-74049 Execution After Redirect (EAR) vulnerability in Apache Tomcat. vulnerability
  • CVE-2026-16323 Execution after redirect (EAR) vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows… vulnerability
  • CVE-2026-61407 Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. vulnerability
  • CVE-2026-58455 Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary… vulnerability
  • CVE-2026-10271 A flaw has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. vulnerability
  • CVE-2026-2699 Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. vulnerability
  • CVE-2026-3262 A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. vulnerability
  • CVE-2026-3264 A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. vulnerability
  • CVE-2025-8350 Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services… vulnerability
  • CVE-2025-6967 Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. vulnerability
  • CVE-2025-9848 A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. vulnerability
  • CVE-2025-53077 An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. vulnerability
  • CVE-2024-48766 NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors… vulnerability
  • CVE-2024-3376 A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. vulnerability
  • CVE-2024-2635 The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client,… vulnerability
  • CVE-2024-2569 A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. vulnerability
  • CVE-2024-2570 A vulnerability was found in SourceCodester Employee Task Management System 1.0. vulnerability
  • CVE-2024-2571 A vulnerability was found in SourceCodester Employee Task Management System 1.0. vulnerability
  • CVE-2024-2572 A vulnerability was found in SourceCodester Employee Task Management System 1.0. vulnerability
  • CVE-2024-2573 A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. vulnerability

Referenced by CWE · has member (1)