CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Impactr finds and proves whether CWE-601 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.